H1 Systems Successfully Completes NIS2 Compliance Audit

Lead H1 Systems Engineering Services Ltd. has successfully completed its NIS2 compliance audit. The result is the result of several weeks of intensive teamwork and is an important step in formally demonstrating organizational cybersecurity maturity.

What does NIS2 mean and why is it mandatory?

NIS2 (Network and Information Security 2) is the European Union’s comprehensive cybersecurity directive, which was transposed into national law in Hungary by Act LXIX of 2024. The regulation requires mandatory compliance for organizations operating critical and important infrastructure — not as a recommendation, but as a legal obligation.

Organizations falling under its scope must demonstrate that they have:

  • adequate information security regulations and documentation,
  • risk management methodology,
  • incident management and logging capabilities,
  • authorization management controls,
  • documented and audited IT systems.

H1 Systems falls under the scope of the regulation, therefore, conducting the audit was not an optional decision.

What was behind the successful audit?

  • The preparation involved three internal electronic information systems and required real organizational effort. The main elements of the work performed were:
  • Building and updating a documentation system A complete review of the Information Security Policy, the Procurement, Supplier Management, Incident Management, Configuration Management and Logging procedures, as well as the System Security Plans — separately for each system.
  • Itemized fulfillment of audit expectations The auditor asked 49 interview questions and formulated 71 evidence requests. These had to be answered system-by-system, in a documented manner — supported by log analyses, risk assessments, incident simulation exercises, authorization review protocols, and management approval documents.

Organizational coverage The areas examined encompassed the entire operation: from HR processes to financial systems to IT infrastructure.

Compliance is not a one-time event

NIS2 compliance — similar to an ISO certificate — is not a closed chapter, but a state that requires continuous maintenance. As the rules, system environment, and threat landscape change, documentation, controls, and internal processes need to be regularly reviewed.

For H1 Systems, this audit is also the next step in institutionalizing a cybersecurity approach — creating frameworks that place the protection of customer data, critical systems, and organizational operations on a lasting foundation.