Ochronamax maps every finding to the frameworks your regulators assess, and keeps the clock when an incident starts.
Coverage is shown for each framework you enable: controls exercised, controls with open findings, and the trend.
The attack technique behind every finding.
Annex A controls, ready for your certification audits.
The risk-management measures NIS2 requires.
ICT risk requirements, switched on for financial entities.
Prioritized safeguards for any organization.
For teams that handle card payments.
Trust Services Criteria for service providers.
Roll up compliance across every subsidiary.
Declare an incident, record when you became aware, and Ochronamax shows a live countdown for every regulation that applies to you.
| Regulation | Applies to | Deadlines tracked |
|---|---|---|
| NIS2 | Essential and important entities | Early warning 24 h · Notification 72 h · Final report 1 month |
| DORA | Financial entities | Initial 4 h from classification (24 h at most) · Intermediate 72 h · Final 1 month |
| GDPR | Anyone handling personal data | Authority within 72 h · Individuals without undue delay |
| Cyber Resilience Act | Makers of digital products | Early warning 24 h · Notification 72 h · Final report 14 days to 1 month |
Reports are drafted in Polish or English in the structure each authority expects, ready for you to edit and submit.
Owners and security managers are reminded at 50%, 75% and 90% of every deadline, and when one is overdue.
Every declaration, timestamp change, draft and submission is recorded and exportable as an evidence pack.
Deadlines are a tracking aid, not legal advice. Confirm your obligations with your legal or compliance team. Ochronamax does not decide whether an incident is reportable and does not file reports for you.
We are onboarding our first customers now. Tell us about your environment.