---
title: "Reduce internal access risks"
description: "Reduce internal access risks, family Threats, NIS2 Art. 21(2)(i)"
url: https://www.alt-f1.be/en/table/ins/
organization: ALT-F1 SRL, Brussels (VAT BE 0830.560.718)
---

# Reduce internal access risks

Short label: INSIDER

Family: Threats · NIS2 Art. 21(2)(i)
<a id="meaning"></a>

## Meaning

Employees, contractors and former staff can accidentally or deliberately misuse access to company systems.

<a id="why"></a>

## Why it matters

A personal account or an old administrator permission can leave information outside normal company control.

<a id="actions"></a>

## What you can do

Review access, use company accounts and document permitted storage. Remove access promptly when someone leaves.

## Services that can help

Sovereign Code supports company-controlled projects and access rules. Device Shield supports relevant device and account controls within the agreed scope.

- [Sovereign Code](https://www.alt-f1.be/en/sovereign-code.md)
- [Device Shield](https://www.alt-f1.be/en/device-shield.md)

## Official reference — NIS2 Art. 21(2)(i)

> 2. The measures referred to in paragraph 1 shall be based on an all-hazards approach that aims to protect network and information systems and the physical environment of those systems from incidents, and shall include at least the following:
>
> — Directive (EU) 2022/2555 (NIS2), Art. 21(2)

> (i) human resources security, access control policies and asset management;
>
> — Directive (EU) 2022/2555 (NIS2), Art. 21(2)(i)

**What this reference concerns:** People and access: who may access what, how accounts are given and taken away, and an inventory of what you own.

[Read the article on EUR-Lex](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32022L2555#art_21) · Official text, quoted from the Official Journal of the EU