Critical infrastructure
Find gaps in your resilience policies, coordinate recovery tests, and follow up on supplier risk. Keep your sites and teams working from one shared Rulebook.

- NIS2
Connect requirements to controls and evidence.
- CER, where applicable
Keep continuity plans and recovery work connected.
- Sector-specific requirements
Bring the rules for your operations into one Rulebook.
From requirements to reviewed evidence.
Find policy gaps, assign the work, and review the evidence in one connected workflow.
Make every site part of the plan.
Give every site clear controls and owners, linked to your continuity plans.
Prepare before the clock starts.
Assign incident-response roles, test recovery plans, and track the actions from each exercise.
Follow the responsibility to the supplier.
Track supplier controls, collect evidence, and follow up on what is still missing.
Rulebook & gap review
Keep policy rules linked to their original passages, versions, and approvals. Review the requirement, the missing coverage, and the proposed wording together.
Controls & tasks
Set an owner, a collection schedule, and the evidence each control needs.
Evidence & audit
Check submissions against the control, resolve missing details, and record human review.