What NIS2 means for your Salesforce and your cloud
NIS2 asks organisations to show how they protect their systems. Your Salesforce environment and your cloud are part of that. On this page you can read what NIS2 is, what the Centre for Cybersecurity Belgium (CCB) expects and how our security scan helps.
Ask your questionWhat is NIS2?
NIS2 is a European directive on cybersecurity. In Belgium it has applied since 18 October 2024, through the NIS2 law. It covers organisations in sectors such as energy, transport, healthcare, digital services, public administration, food and manufacturing. Depending on its sector and size, an organisation is an essential or an important entity.
Not covered yourself? NIS2 can still affect you. Organisations that are covered must also check the security of their suppliers, so you're increasingly likely to get a questionnaire or a clause in your contract.
What the CCB asks
The CCB is the NIS2 supervisor in Belgium. Its framework is the CyberFundamentals: a list of concrete security measures, in levels that match your organisation's risk. You use that framework to show that you've taken the measures.
Read more about the law and who it covers on the CCB's website.
Where your Salesforce and your cloud fit in
Your customer data lives in Salesforce, and your integrations often run in the cloud. That's why many of the measures are about those systems:
- who has which permissions, and whether they're still right
- signing in with MFA, and where people sign in from
- which connected apps can reach your data
- what gets logged, and who follows it up
- keys and passwords: where they are and how often they're rotated
How the security scan helps
Our security scan checks your Salesforce environment and cloud infrastructure. In the report we link each finding to the CyberFundamentals measure it belongs to. You see what's already in order and what still needs doing, and you can show it to your management, your board, a client or an auditor.
The scan isn't a certification: for that you need an accredited auditor. But after the scan you know where you stand.
Questions about NIS2 and your Salesforce?
Leave your details and we'll get in touch.