NIS Navigator

NIS Navigator keeps the work required by the Hungarian cybersecurity act, which transposes the NIS2 directive, in a single register and ties a date, an owner and a verifiable trail to every step, so the evidence is created while the work is done.

Version

1.0.0

Platform

ASP.NET Core 10, MongoDB, Windows Server and IIS

Type

Web application for an internal network, self-hosted deployment

Distribution

Licensed; without a licence it runs with 5 assets, 5 services and 5 users

Price

Custom quote

An organisation covered by Hungarian Act LXIX of 2024 and its implementing decrees has to prove its cybersecurity controls as well as operate them, so instead of scattered spreadsheets and e-mails it needs a register from which an auditor can trace who approved what, when it was reviewed and what the outcome was.

The system covers the whole compliance cycle: it determines the classification, records services, assets and suppliers, manages risks and management approvals, schedules recurring checks, tracks incident reporting deadlines and runs the cybersecurity audit according to the SZTFH methodology.

• Classification and compliance table

  A four-step questionnaire with fixed legal thresholds determines whether the organisation is an essential or an important entity, and the compliance table compares the 19 chapters of the MK Decree 7/2024 catalogue with the register.

• Services, assets and suppliers

  Assets belong to services and suppliers to the services they provide, so an asset's page shows every related risk, incident, attack vector and recovery plan in one place.

• Risks and management approval

  A risk stays in one piece from its description through the treatment plan and residual risk to the matrix, and risks, document versions and recovery plans are all closed by the same four-eyes approval workflow.

• Incidents with deadline tracking

  For a significant incident the system counts down the 24-hour early warning, the 72-hour notification and the one-month final report, sends reminder e-mails and records on a timeline who decided what and when.

• Recurring tasks and to-do list

  The system plans the individual occurrences of reviews, backup tests and training from a single rule, and the To-do page shows the due work of four modules in one list ordered by deadline.

• Business continuity

  Recovery plans, the coverage view and documented restore tests together show which services are backed by a valid and tested plan.

• Cybersecurity audit

  It runs the audit from security classification through the full requirement catalogue, deviations and the action plan to the compliance indices and the audit report, keeping the organisation's and the auditor's assessment in separate lanes.

• Security and a sealed audit log

  Two-factor sign-in is mandatory, visibility follows the need-to-know principle, sensitive fields are encrypted at rest, and the numbered, HMAC-sealed audit log reveals any later change made directly in the database.

An ASP.NET Core MVC web application on .NET 10 with a Bootstrap UI, split into Domain, Application, Infrastructure and Web layers, with a MongoDB database and its own MongoDB-backed Identity store.

PDF reports are produced with PDFsharp and MigraDoc, mail runs on MailKit, the encryption and audit-integrity keys live in a DPAPI-protected key store, and an idempotent PowerShell script deploys the application under IIS.

C# .NET 10 ASP.NET Core MVC Bootstrap MongoDB MailKit PDFsharp AES-256-GCM HMAC-SHA512 TOTP

• Product overview (PDF) The features of NIS Navigator from classification to audit in one document