---
title: "Write usable security rules"
description: "Write usable security rules, family Govern, NIS2 Art. 21(2)(a)"
url: https://www.alt-f1.be/en/table/po/
organization: ALT-F1 SRL, Brussels (VAT BE 0830.560.718)
---

# Write usable security rules

Short label: RULES

Family: Govern · NIS2 Art. 21(2)(a)
<a id="meaning"></a>

## Meaning

Write short instructions explaining how staff should use systems, handle information and report problems.

<a id="why"></a>

## Why it matters

A clear rule helps people make a consistent decision without guessing.

<a id="actions"></a>

## What you can do

Start with software installation, suspicious messages and approved storage. Name the owner of each rule and make it easy to find.

## Services that can help

Workshops help write practical rules. Sovereign Code adds agreed rules for code storage, company accounts and access keys.

- [Workshops](https://www.alt-f1.be/en/workshops.md)
- [Sovereign Code](https://www.alt-f1.be/en/sovereign-code.md)

## Official reference — NIS2 Art. 21(2)(a)

> 2. The measures referred to in paragraph 1 shall be based on an all-hazards approach that aims to protect network and information systems and the physical environment of those systems from incidents, and shall include at least the following:
>
> — Directive (EU) 2022/2555 (NIS2), Art. 21(2)

> (a) policies on risk analysis and information system security;
>
> — Directive (EU) 2022/2555 (NIS2), Art. 21(2)(a)

**What this reference concerns:** You must know your risks and write down how you protect your systems: a risk analysis and a security policy, kept up to date.

[Read the article on EUR-Lex](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32022L2555#art_21) · Official text, quoted from the Official Journal of the EU