Meeting NIS CAF v4.0: How far ServiceNow, Veza and Armis take you

Meeting NIS CAF v4.0: How far ServiceNow, Veza and Armis take you

New legislation means organisations supporting critical national infrastructure must be able to prove their CAF compliance, or face regulatory scrutiny. But how much of the framework can a platform you may already own actually meet?

NIS CAF v4.0 whitepaper preview

Get your copy of the whitepaper

What we did

To answer that honestly, we assessed ServiceNow against all 234 "Achieved" criteria of NIS CAF v4.0, one by one. We then re-ran the assessment with two platforms ServiceNow has recently acquired, Veza and Armis, to measure exactly how much further the combination takes you.

In this paper, you'll learn

1

How much of the CAF you can meet with ServiceNow, Veza and Armis

A clear, criterion-by-criterion view of what the combined platform meets, and where it doesn't, so you get a realistic sense of what's genuinely achievable before committing to any investment.

2

How much of your compliance gap you may already be able to close

With tools you might already have licensed, or that sit within a platform you're already invested in, rather than adding another system to the stack.

3

Where each product earns its place

How Armis discovers and identifies every asset across your estate, including the OT and unmanaged devices traditional tools miss, and how Veza maps who and what can access your data. Both are central to evidencing CAF compliance.

4

What no platform can meet, and why

An honest view of the criteria that comes down to your people, governance and specialist tooling, so you get a realistic picture, not a sales pitch.

32 pages

What's inside?

Executive summary 2
How we assessed the framework 5
What ServiceNow achieves alone 7
Introducing Veza: identity & access 9
Introducing Armis: assets & exposure 10
How the three fit together 11
The headline uplift 12
Objective A: managing security risk 13
Objective B: protecting against attack 16
Objective C: detecting events 21
Objective D: minimising impact 24
What's left, and why 26
Conclusions, roadmap & how we help 27
How ServiceNow fits with Veza + Armis 32
Written by Tom Owles · Risk and SecOps Practice Lead

Ready to see where you stand against NIS CAF v4.0?

The form is at the top of the page. It takes a minute, and the whitepaper is free.

Back to the form
Pulsar

© Pulsar Consulting Ltd. Premier ServiceNow Partner, UK and South Africa.