Products · Water & Wastewater
Alexus for Water & Wastewater
Drinking-water and wastewater operators are essential entities under NIS2, a sector where availability and integrity are public-health matters. Alexus turns day-to-day operations into the evidence NIS2 requires.
Water and wastewater are essential entities under NIS2 Annex I. These operators run heavily OT-based estates (SCADA, treatment control) alongside corporate IT, and regulators expect robust risk management and prompt incident reporting across both.
Aligns with national critical-infrastructure regimes.
NIS2 for Water & Wastewater, in three questions
Yes — drinking water and waste water are high-criticality sectors under NIS2 Annex I.
Essential entity · NIS2 Annex I (Drinking water · Waste water)
Large operators are Essential and medium ones Important, and some water operators are in scope regardless of size.
NIS2 generally applies from medium-sized up — broadly 50+ staff, or annual turnover / balance-sheet total over €10M. (Medium is under 250 staff and up to €50M turnover or €43M balance sheet; larger than that is a “large” entity.) Some entities are in scope regardless of size, and the exact rules are set by your country’s transposition.
Register with your national competent authority once the transposing law applies.
Put the ten cybersecurity risk-management measures in place — and be able to show them working.
Report significant incidents: a 24-hour early warning, a 72-hour notification, and a final report within a month.
Your management body approves and oversees the measures — and can be held personally liable.
Scope is ultimately set by your national transposition — use the self-checks above, or ask us to confirm against your estate.
What makes NIS2 hard in Water & Wastewater
OT/SCADA exposure
Treatment and control systems were built for reliability, not cyber-resilience, and they're increasingly connected.
Lean teams
Many operators run critical infrastructure with small IT functions and no dedicated compliance staff.
Public-health stakes
Integrity and availability incidents carry health consequences; they must be contained and evidenced fast.
The evidence layer, tuned for Water & Wastewater
Unified IT/OT inventory
A continuously reconciled graph spanning SCADA/OT and corporate IT, the cross-estate asset hygiene Article 21 expects.
Continuous readiness scoring
A live score against the 10 Article 21 measures, with a per-control evidence trail.
Rapid Article 23 reporting
Early-warning and full reports assembled from the live graph, ready for you to review and submit.
Regulator-grade accountability
Quarterly evidence packs that stand up to essential-entity scrutiny.