The NIS2 Directive is an EU-wide legal framework that enforces strict cybersecurity and incident reporting standards across 18 critical sectors.
Alexus AI
Alexus AI

Products · Transport & Logistics

Alexus for Transport & Logistics

Air, rail, water and road operators are essential entities under NIS2, where a cyber incident can halt physical movement. Alexus keeps a living record of every system, change and incident, so compliance rides along with operations.

Essential entity · NIS2 Annex I (Transport: air, rail, water, road)
Why NIS2 matters for Transport & Logistics

Transport is an essential-entity sector under NIS2 Annex I. Operators run a mix of corporate IT, booking and logistics platforms, and operational systems, and regulators expect risk management and incident reporting across all of them. Alexus builds the single picture that makes that achievable.

Often overlaps with sector safety regulators.

Am I in scope?

NIS2 for Transport & Logistics, in three questions

In scope?

Yes — transport (air, rail, water and road) is a high-criticality sector under NIS2 Annex I.

Essential entity · NIS2 Annex I (Transport: air, rail, water, road)

Why?

Large transport operators are Essential and medium ones Important; the medium-plus size rule decides which.

NIS2 generally applies from medium-sized up — broadly 50+ staff, or annual turnover / balance-sheet total over €10M. (Medium is under 250 staff and up to €50M turnover or €43M balance sheet; larger than that is a “large” entity.) Some entities are in scope regardless of size, and the exact rules are set by your country’s transposition.

What you must do
Register

Register with your national competent authority once the transposing law applies.

Article 21

Put the ten cybersecurity risk-management measures in place — and be able to show them working.

Article 23

Report significant incidents: a 24-hour early warning, a 72-hour notification, and a final report within a month.

Article 20

Your management body approves and oversees the measures — and can be held personally liable.

Scope is ultimately set by your national transposition — use the self-checks above, or ask us to confirm against your estate.

The challenge

What makes NIS2 hard in Transport & Logistics

IT meets operational tech

Scheduling, telemetry and control systems sit apart from corporate IT, yet NIS2 treats them as one risk surface.

Uptime is physical

An outage can ground flights or stop trains; incidents must be triaged, resolved and evidenced under real pressure.

Sprawling partner networks

Logistics depends on many third parties, widening the attack surface NIS2 expects you to manage.

How Alexus helps

The evidence layer, tuned for Transport & Logistics

Unified inventory across systems

A continuously reconciled map of corporate, platform and operational systems, the asset hygiene Article 21 expects.

Continuous Article 21 readiness

A live score against the 10 measures with a per-control evidence trail.

Article 23 incident reporting

Early-warning and full reports assembled from the live graph, ready for you to review and submit.

Board accountability

Quarterly evidence for Article 20 due-diligence, defensible to a regulator.

The value

What you get

  • One evidence trail across IT and operations
  • Incidents reported inside the regulatory window
  • A current inventory of critical systems
  • Partner and supply-chain risk mapped