Securing Remote Access for NIS2 Compliance
Give remote staff a secure, controlled network environment wherever they work. Loxada helps organisations address their NIS2 obligations without adding operational burden.
The Problem
NIS2 imposes stricter cybersecurity obligations across a much broader set of sectors than the original directive, including energy, health, finance, digital infrastructure and manufacturing. Entities in scope are expected to demonstrate appropriate and proportionate cybersecurity risk-management measures.
Most organisations have addressed firewalls, endpoint software and internal access control. Fewer have looked closely at how staff connect remotely. Home Wi-Fi, serviced offices and shared building infrastructure all sit outside corporate IT oversight, and while an encrypted-connectivity client protects traffic in transit, it does not address a compromised or spoofed local network beneath it.
That is particularly relevant for hybrid workers, field staff, board members and external collaborators reaching internal systems from outside managed networks. NIS2 asks organisations to secure the edge of their digital environment, not only the data centre and the devices on it.
Loxada’s Solution
Loxada makes it straightforward to put proportionate network-edge controls in place, without relying on user behaviour or complex IT processes.
Loxada secure routers ship pre-configured, with no user management required. Staff working from home, client sites or temporary offices connect through a controlled network created by their Loxada secure router. The device connects over Wi-Fi or Ethernet to whatever line is available, trusted or not, and routes traffic through Loxada’s secure connectivity layer, an encrypted connection from the device out to the internet.
Device-based network separation. Users are separated from other devices on the same physical network, limiting lateral risk.
Operation on untrusted infrastructure. Even if the local router is compromised, the Loxada secure router maintains an isolated path.
Centrally managed updates. Firmware is updated centrally using cryptographically signed packages, with no user or local admin involvement.
Blocks known malicious domains. Requests to domains on Loxada’s aggregated blocklist are dropped before they resolve.
No user override. Even after a factory reset, the device returns to its secure Loxada configuration.
Deployment is fully auditable, with monthly security reports and device-status visibility.
Benefits and Use Cases
Organisations in scope need to show they have taken reasonable and proportionate steps across their whole working environment, not only centrally. Everyday scenarios include:
Remote and hybrid workers splitting time between office, home and third-party locations.
Executives and board members reaching sensitive systems from unmanaged home environments.
Staff in serviced or multi-tenant buildings, reducing exposure to shared building infrastructure.
Business continuity, maintaining secure access paths during partial shutdowns or containment events.
By establishing a controlled, centrally managed network path, Loxada extends your security posture to the point where it is usually weakest.
Why This Matters for NIS2
The directive’s core risk-management provision sets out a range of technical and organisational measures, including:
- Security of network and information systems
- Access control policies
- Use of cryptography and secure communications
- Supply chain and third-party risk management
- Cyber hygiene and training
Loxada supports several of these directly, providing a repeatable, documentable way to secure remote access even when a staff member is connecting through a network entirely outside your control.
Unlike endpoint software or policy documents alone, it is a physical control that can be deployed quickly and consistently across distributed teams, which suits medium-sized organisations, teams without heavy IT resource, and suppliers who need to evidence good practice to clients or regulators.
Loxada supports one layer, the networks outside your control that staff connect from. It is a preventive control providing deployment coverage and configuration assurance, not monitoring, detection or containment.