Products · Transport & Logistics
Alexus for Transport & Logistics
Air, rail, water and road operators are essential entities under NIS2, where a cyber incident can halt physical movement. Alexus keeps a living record of every system, change and incident, so compliance rides along with operations.
Transport is an essential-entity sector under NIS2 Annex I. Operators run a mix of corporate IT, booking and logistics platforms, and operational systems, and regulators expect risk management and incident reporting across all of them. Alexus builds the single picture that makes that achievable.
Often overlaps with sector safety regulators.
NIS2 for Transport & Logistics, in three questions
Yes — transport (air, rail, water and road) is a high-criticality sector under NIS2 Annex I.
Essential entity · NIS2 Annex I (Transport: air, rail, water, road)
Large transport operators are Essential and medium ones Important; the medium-plus size rule decides which.
NIS2 generally applies from medium-sized up — broadly 50+ staff, or annual turnover / balance-sheet total over €10M. (Medium is under 250 staff and up to €50M turnover or €43M balance sheet; larger than that is a “large” entity.) Some entities are in scope regardless of size, and the exact rules are set by your country’s transposition.
Register with your national competent authority once the transposing law applies.
Put the ten cybersecurity risk-management measures in place — and be able to show them working.
Report significant incidents: a 24-hour early warning, a 72-hour notification, and a final report within a month.
Your management body approves and oversees the measures — and can be held personally liable.
Scope is ultimately set by your national transposition — use the self-checks above, or ask us to confirm against your estate.
What makes NIS2 hard in Transport & Logistics
IT meets operational tech
Scheduling, telemetry and control systems sit apart from corporate IT, yet NIS2 treats them as one risk surface.
Uptime is physical
An outage can ground flights or stop trains; incidents must be triaged, resolved and evidenced under real pressure.
Sprawling partner networks
Logistics depends on many third parties, widening the attack surface NIS2 expects you to manage.
The evidence layer, tuned for Transport & Logistics
Unified inventory across systems
A continuously reconciled map of corporate, platform and operational systems, the asset hygiene Article 21 expects.
Continuous Article 21 readiness
A live score against the 10 measures with a per-control evidence trail.
Article 23 incident reporting
Early-warning and full reports assembled from the live graph, ready for you to review and submit.
Board accountability
Quarterly evidence for Article 20 due-diligence, defensible to a regulator.

