NIS-2 & CRA COMPLIANCE IN FLIGHT // §§ 30, 32, 38 BSIG

Halcon's Eye Over
Your IT Operations.

Halcon monitors your IT services and supply chains in an audit-proof and works-council-compliant manner, enforces security rules automatically, and alerts you in real time to critical vulnerabilities. Steer remediation without delay and generate your NIS-2 compliance report and error-free 24h BSI notification at the push of a button.

Explore C-Level Cockpit Request PoC & Consultation
One-Click Audit PII Shield (Works Council OK) 14 Min. BSI Export
HALCON // GOVERNANCE ENGINE Halcon's Eye Telemetry
LIVE
§ 30 BSIG MANDATE
10 / 10
100% Active Coverage
24H BSI REPORT
Avg. 14 Min.
State-Snapshot Export
Dual-Layer PII Shield Works Council Ready

1,420 Assets // 48 Supplier SLAs // 0 Manual Excel Entries.

Jump to Interactive § 30 BSIG Live Drill-Down
CHALLENGE & REGULATION

NIS-2 is the European Union’s response to ongoing cyber warfare.

Comprehensive documentation mandates, strict 24/72-hour incident reporting to the BSI/CSIRT, and statutory executive oversight duties (§ 38 BSIG / Art. 20 NIS-2) are legally binding. The core implementation challenge is satisfying every stakeholder simultaneously:

1. C-Level & Executive Board Statutory oversight duties (§ 38 BSIG) & lack of plain-language posture visibility
Governance
2. Works Council & Data Privacy Built-in employee privacy (PII separation) technically prevents performance & behavior monitoring
PII Shield
3. IT Security, Assets & Regulators Legacy interfaces, isolated silos, and strict GDPR, NIS-2 & CRA mandates
Silos & SLAs
THE HALCON ARCHITECTURE

Operational IT Management + Compliance with Statutory Executive Oversight (§ 38)

One-Click Audit Readiness
Default Deny & Privacy by Design
All Silos & Supply Chains in View
Rapid Go-Live in Days
HALCON LIVE WEB APPLICATION (EXAMPLE)

C-Level Cockpit & Live Drill-Down

Real-time aggregation straight from daily IT operations: 1,420 Assets // 48 Supplier SLAs // 0 Manual Excel Entries.Click on any § 30 BSIG Tile (01–10) below to inspect the interactive 4-stage plain-language report live.
HALCON // Governance Engine app.halcon.tech/c-level/nis2-overview
Dual-Layer Telemetry: Active PII Filter: 100% (Works Council OK)
OVERALL NIS-2 SCORE
78% Target: >90%
§ 30 BSIG COVERAGE
100% 10/10 active
24H BSI READINESS
94% 14 Min. Export
IMMEDIATE FOCUS (§ 38)
2 RED Escalation active
01 // RISK ANALYSIS
98%
Asset Coverage
GREEN // Auto-Sync
02 // INCIDENT REPORTING
94%
Ready in <24h
GREEN // Playbook active
03 // BCM & BACKUP
84%
Recovery Test
AMBER // 3 Tests open
04 // SUPPLY CHAIN
62%
Verified SLAs
RED // 18 Proofs missing
05 // VULNERABILITIES
68%
Patched <30d
RED // Click for Drill-Down
06 // EFFECTIVENESS
96%
Verification Rate
GREEN // Audit-Ready
07 // TRAINING (§ 38)
88%
Certified
AMBER // 1 Cert open
08 // CRYPTOGRAPHY
99%
Policy Compliant
GREEN // TLS Check active
09 // ACCESS CONTROL
100%
Default-Deny
GREEN // PII anonymized
10 // MFA & IDENTITY
91%
Admin MFA
AMBER // 4 Accounts open
HALCON WEB DRILL-DOWN // TILE #05 (VULNERABILITY MANAGEMENT)

Critical Vulnerability Remediation (<30-Day SLA per § 30 (2) No. 5 BSIG)

STATUS: RED (68%) Flow Studio: Escalated to COO Ticket Ref: #INC-8842
AUTOMATED 4-STAGE EXECUTIVE NARRATIVE FROM TICKET & PATCH TELEMETRY
  1. Statutory Purpose (§ 30 BSIG / Art. 21 NIS-2): Monitors the ratio of production IT systems without overdue critical vulnerabilities (>30 days).
  2. Live Telemetry Finding: Rate dropped to 68% because 14 production servers in the ERP cluster have not yet been rebooted due to shift operations.
  3. Root Cause & Workflow Status: Maintenance window was postponed by plant management; Halcon Flow Studio triggered mandatory escalation to the COO.
  4. Scheduled Remediation: Patch rollout is locked in for Saturday at 02:00 AM; projected status by Monday: 97% (Green).
ACCOUNTABLE (OVERSIGHT): COO / PLANT DIRECTOR // TARGET: >95%
Cloud & SaaS Platforms 96% (OK)
Finance & HR Systems 88% (Warning)
ERP & Manufacturing Control (OT/IT) 48% (Critical)
420–15 Days
916–30 Days
14>30d (Overdue)
OPERATIONAL CYBER KPIS INSTEAD OF PAPER COMPLIANCE

From Daily IT Operations to Statutory Oversight Proof

Why Halcon goes live in days instead of months: Pre-configured best-practice thresholds and no-code interfaces eliminate month-long consulting projects.

STEP 01 // DAILY OPERATIONS

Halcon Work Platform

Captures systems, patches, suppliers, and incidents directly from daily IT operations.

Why live in days instead of months? Flexible No-Code API Engine: Existing tools and data sources connect immediately with zero coding effort.
STEP 02 // THRESHOLDS

Clear Traffic-Light Logic (RAG)

Automatically translates raw technical metrics into clear Red, Amber, and Green compliance quotas.

Built-in Halcon Best Practices: Ready-to-use thresholds and RAG rules guide your team out of the box—no multi-month consulting design required.
STEP 03 // ACCOUNTABILITY

Clear Ownership

Cleanly separates technical data delivery from executive management accountability.

Only Required Customer Input: Assign roles & names: Define internally who delivers technical data (Owner) and who is accountable in management.
STEP 04 // § 38 BSIG PROOF

Executive Plain Language

Delivers statutory oversight proof for executive boards, BSI regulators, and external auditors.

BSI, ISO-27001 & Halcon Standards: Pre-built report templates generate audit-ready plain-language evidence at the push of a button.
HALCONTECH SECURITY ARCHITECTURE

Perspective.
Performance.
Protection.

Deterministic coupling instead of AI hallucination: Mathematically verifiable linkage of live assets, supply chain SLAs, and automated 24h BSI incident reporting—protected by our Dual-Layer Privacy Switch.

STATUTORY FOUNDATION // §§ 30, 32, 38, 61, 65 BSIG (EU NIS-2)

The 4 Statutory Drivers Behind the Halcon Cockpit

§ 38 (1) & (2) BSIG (Art. 20 NIS-2) // Executive Oversight

“Management bodies are required to implement the risk management measures pursuant to § 30 and to continuously monitor their implementation.”

Halcon Solution: Continuous oversight evidence documents executive compliance in an audit-ready format at all times.
§ 30 (1) & (2) BSIG (Art. 21 NIS-2) // 10 Mandatory Domains

“Compliance with the requirements under sentence 1 must be documented by the entities.” (Covers 10 mandatory domains: Risk Analysis, Incidents, Backup/BCM, Supply Chain, Vulnerabilities, Effectiveness, Training, Cryptography, Access Control, MFA).

Halcon Solution: All 10 mandatory domains are documented automatically out of daily IT operations.
§ 32 (1) BSIG (Art. 23 NIS-2) // 24h & 72h BSI Reporting

Significant security incidents must be reported to the BSI without undue delay—within 24 hours (early warning), within 72 hours (incident assessment), and within 30 days (final report).

Halcon Solution: State-Snapshot exports an error-free initial BSI notification directly from the incident ticket in avg. 14 minutes.
§§ 61, 62 & 65 BSIG // Audits & Fines

The BSI may order the submission of documentation as well as security audits by independent bodies. Infringements carry fines of up to €10 million or 2% of global annual turnover.

Halcon Solution: One-Click Audit Readiness for the BSI, statutory auditors, and cyber insurers.
HALCON TERMS // ZERO PER-SEAT LICENSES

Transparent Flatrate

€5,990 / month (plus €15,000 base implementation)

Our flatrate model breaks expensive per-seat licensing: Unlimited users and assets at a fixed price—while your NIS-2 audit evidence is generated automatically as a byproduct of daily IT operations.

Unlimited Users & Unlimited Assets
Up to 4,000 Employees
Integrated Partner Products Included
100% EU-Sovereign Cloud Hosting
Request PoC & Flatrate Proposal
DIRECT COST COMPARISON

Saves > €150,000 / Year vs. Per-Seat Licensing

Legacy enterprise suites charging per-user licenses average €208,000 in annual recurring fees plus around €100,000 for lengthy implementations in mid-market organizations.

Legacy Enterprise Suites: ~ €208,000 / year
HALCONTECH Flatrate: Predictable & All-Inclusive
EXECUTIVE LEADERSHIP & CONTACT

Your Executive Contacts

Over 50 years of combined enterprise experience in cyber security, architecture, and strategic go-to-market execution.

Avy Ellis
25+ YEARS
Cyber Security & Enterprise Architecture

Avy Ellis

Founder & CEO // Extensive leadership track record in global IT Security (ISO 27001), CISO Cyber-KPI governance, and Enterprise Service Management.

avy@halcon.tech +49 176 490 757 44
Wolf Kunik
25+ YEARS
Marketing & Sales

Wolf Kunik

Chief Marketing Officer // Specialized in B2B go-to-market strategy, strategic channel partner ecosystems, and corporate communications.

wolf@halcon.tech +49 177 749 1668