NIS2 and DORA Compliance and Protecting your Atlassian Cloud Data

June 17, 2024
This is a guest-article from Atlassian Marketplace Partner, Revyz

In late 2022, the European Parliament introduced the Network and Information Systems Directive (NIS2) and the Digital Operational Resilience Act (DORA) to enhance cybersecurity across the EU.

NIS2 requires compliance by EU member states by October 18th, 2024, focusing on robust security measures for digital service providers, while DORA, effective January 17th, 2025, mandates financial institutions to ensure digital resilience.

These regulations will significantly affect how businesses approach digitalization and cybersecurity, with organizations needing to act quickly to comply. Revyz’s Atlassian Data Protection solution offers tools like automated daily backups, granular restore capabilities, detailed audit logs, and automatic malware scanning to help organizations meet these new compliance requirements and protect their data in the Atlassian Cloud.

NIS2 applies to essential sectors such as energy, transport, banking, healthcare, and digital infrastructure, as well as important entities like postal services, waste management, and food production.

US companies providing services to EU customers must also comply.

Non-compliance can lead to substantial fines: up to €10 million or 2% of global annual revenue for essential entities, and up to €7 million or 1.4% for important entities, with even harsher penalties under DORA for financial institutions.

Achieving compliance involves understanding obligations, conducting risk assessments, assembling a compliance team, educating employees, and building resilience.

SoftComply’s partner Revyz simplifies this process for Atlassian Cloud users by ensuring secure backups, enhancing data security, and boosting operational resilience, aiding organizations in navigating the NIS2 and DORA landscape confidently.

Click here for the full article on Revyz’s website.

Table of Contents

Ready to get started?

Contact us to book a demo and learn how SoftComply can cover all your needs

P1 P2 hazard analysis approach
Picture of Marion Lepmets

Marion Lepmets

CEO
August 13, 2025

Do you want to make your medical device risk management more precise? While many companies stick with single probability values in their hazard analysis, ISO 14971 suggests breaking down probability into P1 and P2 components. I’ll show you exactly how to set this up in Jira using nested risk models....

FMEA
Picture of Marion Lepmets

Marion Lepmets

CEO
August 4, 2025

Risk management in the medical device industry isn’t optional – it’s literally life or death. If you’re developing medical devices, you need to identify, assess, and mitigate risks throughout your entire product lifecycle. Patient safety depends on it. Watch this step-by-step guide to implementing FMEA for medical device risk management....

Guide to Hazard Analysis
Picture of Marion Lepmets

Marion Lepmets

CEO
July 29, 2025

Medical device risk management isn’t just another regulatory checkbox. It’s the foundation that proves your device is safe for patients and users. When auditors come knocking, they’ll scrutinize your risk management process more than almost anything else. Get it wrong and you’re looking at serious compliance issues. I’ve put together...