Compliance
Every framework asks you to notice attacks. Decoys show that you do.
NIS2, ISO 27001 and SOC 2 all expect you to watch for intruders, act on what you find and prove it. Kandaro Deception covers that part, with evidence that is easy to show. It does not make you compliant on its own, and each page below says what it leaves to you.
Frameworks
Pick yours.
NIS2
EU law, in the Netherlands the Cyberbeveiligingswet. Medium and large organisations in essential sectors.
Where Kandaro helps: Detecting and handling incidents, and the facts for the 24-hour, 72-hour and one-month reports.
ISO 27001
The international standard for managing information security, certified by an audit.
Where Kandaro helps: Control A.8.16 Monitoring activities, plus incident assessment, response and evidence.
SOC 2
An independent auditor’s report that customers, often in the US, ask their suppliers for.
Where Kandaro helps: Criteria CC7.2 to CC7.4: monitoring for attacks, evaluating events and responding to incidents.
For any framework
What a decoy gives you to show.
Using another framework, such as DORA, BIO or NEN 7510? They ask for the same things in other words, so the same evidence usually applies.
- Monitoring that runs all the time, inside the network, where firewalls and antivirus don’t look.
- Alerts that matter: nobody legitimate touches a decoy, so the record stays short and every entry is worth a look.
- A record of what your team did: who handled each incident, what they decided and when.
- Timelines and JSON exports you can hand to an auditor or attach to a report.
- A supplier you can assess: our security page, data processing agreement and signed sensor images.
Need it mapped to your framework? Ask us through the contact form. This page is not legal or audit advice.
See your first explained finding today.
Start a 14-day trial of Kandaro Deception. Your first decoy is running in about a minute.
Card required · cancel before day 14 and pay nothing