Since the NIS 2 Directive came into force, cybersecurity is no longer an option but a legal obligation for thousands of French companies. While the new ANSSI requirements may seem complex, KiwiBackup is one step ahead. Thanks to our ISO 27001 certification, we offer our clients a backup framework that is already aligned with the highest European resilience standards.

NIS 2: a new paradigm for French cybersecurity

The NIS 2 (Network and Information Security 2) Directive aims to raise the level of information system security throughout the European Union. In France, under the aegis of ANSSI, it considerably expands the number of entities concerned (SMEs, IT service companies, local authorities, healthcare) by classifying them as "Essential Entities" (EE) or "Important Entities" (IE).

The obligations are clear: strict governance, risk management, supply chain security, and mandatory incident notification.

KiwiBackup: proactive compliance serving our clients

Although the size of our organization may exempt us from certain direct obligations, KiwiBackup has chosen voluntary compliance. Our Information Security Management System (ISMS), audited and ISO 27001 certified, naturally covers most of the pillars of NIS 2:

1. Governance and Risk Management

NIS 2 requires management to be involved in cyber strategy. Our ISO 27001 certification is built precisely on this commitment: every risk is identified, assessed, and treated through documented controls that are reviewed annually.

2. Supply Chain Security

This is one of the key points of NIS 2: companies must make sure their suppliers are secure. By choosing KiwiBackup, you immediately check this box. We rigorously audit our own providers and monitor vulnerabilities in our software libraries to guarantee the integrity of the chain.

3. Business Continuity and Resilience (DRP/BCP)

Article 21 of NIS 2 requires measures to ensure service continuity. KiwiBackup has regularly tested Disaster Recovery Plans (DRP) and Business Continuity Plans (BCP), ensuring that your data remains available even after a ransomware attack or a physical disaster.

4. Incident Management

We have proven incident detection and response procedures. In the event of an anomaly, our alert system and notification capabilities enable you to respond within the deadlines set by the new regulations.

Why choose KiwiBackup for your NIS 2 compliance?

Choosing a French, sovereign, ISO 27001/HDS certified backup partner means checking several critical boxes in your NIS 2 audit:

  • End-to-end encryption and strict access management

  • Protection against extraterritoriality (no Cloud Act)

  • Recognized expertise to help CIOs and CISOs secure their most valuable assets

Cybersecurity is a team sport. At KiwiBackup, we keep evolving with regulations to turn your legal constraints into competitive advantages.