NIS2 READYIn accordance with the requirements of the Data Act, Tazilla provides customers with the ability to export data created or stored while using the platform. Below is an overview of the exportable data, available formats, and export methods for each module.
| Module | Exportable data | Format | Export method | Scope | Data excluded from export |
|---|---|---|---|---|---|
| Organization | Data on the organization, essential services, employees, user accounts, and documentation. | XLSX | Export from the relevant section of the Organization module. | Organization profile;basic services – list and detail;employees – list and detail;user accounts – list;documentation – list. | Internal technical, system, and security data of the platform* and data protected by third-party rights. |
| Risk Analysis | Assets and their attributes, including classification and continuity data, impacts, threats, controls, and related risk data. | XLSX / CSV | Export from the relevant section of the module; for assets, the “Export all” option is also available. | Assets – list and detail; impacts – list and detail; threats – list and detail; controls – list and detail; comprehensive risk analysis report. | Internal technical, system, and security data of the platform* and data protected by third-party rights. |
| Business Continuity Management | Data on business continuity and asset recovery, plans and plan testing, and backup strategies. | XLSX | Export from the relevant section of the Business Continuity Management module. | Business continuity – assets; plans – list and detail; backup strategies – list and detail. | Internal technical, system, and security data of the platform* and data protected by third-party rights. |
| Registers | Cyber events, change requests, third parties, contracts, GDPR records, configurations and software, and tasks. | XLSX | Export from the relevant section of the module; for cyber events, a summary report can be downloaded. | Cyber events – reports; change requests – list; third parties – list, detail and report;contracts – list and detail; GDPR – RoPA;configurations – list; tasks – list. | Internal technical, system, and security data of the platform* and data protected by third-party rights. |
| Compliance Management | Data on compliance with the requirements of applicable regulations and standards, including compliance levels, controls, findings, and evidence. | XLSX | Export or report generation from the relevant regulation or standard. | Provisions – list; obligations – list and detail. | Internal technical, system, and security data of the platform* and data protected by third-party rights. |
| Education | Data on training, awareness activities, external courses, and certification exams. | XLSX | Export from the relevant section of the Education module. | List and detail for all exportable sections of the module. | Internal technical, system, and security data of the platform* and data protected by third-party rights. |
*Internal technical, system, and security data of the platform includes in particular: (i) system logs, audit trails, and metadata relating to the technical operation of the platform (e.g. performance and diagnostic records), except for records of the activities of specific Customer Users that the Customer requires in order to fulfil its own obligations under personal data protection legislation (the Provider will provide such records to the Customer upon request within a reasonable period if the Customer can demonstrate a need for them); (ii) application configuration parameters and source code; and (iii) security settings, access permissions, and encryption keys.