---
title: "Find and prioritise weaknesses"
description: "Find and prioritise weaknesses, family Detect, NIS2 Art. 21(2)(e)"
url: https://www.alt-f1.be/en/table/vm/
organization: ALT-F1 SRL, Brussels (VAT BE 0830.560.718)
---

# Find and prioritise weaknesses

Short label: VULN

Family: Detect · NIS2 Art. 21(2)(e)
<a id="meaning"></a>

## Meaning

Keep an inventory, assess weaknesses and decide which updates or mitigations matter most.

<a id="why"></a>

## Why it matters

The priority depends on exposure, likely impact and the systems your organisation relies on.

<a id="actions"></a>

## What you can do

Identify affected components, assess exposure, patch or mitigate, then verify the result and record remaining work.

## Services that can help

Custom Software supports component records and updates. Web App Shield can add filtering while an application weakness is addressed; available mitigations depend on the issue.

- [Web App Shield](https://www.alt-f1.be/en/web-shield.md)
- [Custom Software](https://www.alt-f1.be/en/custom-software.md)

## Official reference — NIS2 Art. 21(2)(e)

> 2. The measures referred to in paragraph 1 shall be based on an all-hazards approach that aims to protect network and information systems and the physical environment of those systems from incidents, and shall include at least the following:
>
> — Directive (EU) 2022/2555 (NIS2), Art. 21(2)

> (e) security in network and information systems acquisition, development and maintenance, including vulnerability handling and disclosure;
>
> — Directive (EU) 2022/2555 (NIS2), Art. 21(2)(e)

**What this reference concerns:** Security must be built in when you buy, build or maintain systems, and known vulnerabilities must be handled and disclosed.

[Read the article on EUR-Lex](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32022L2555#art_21) · Official text, quoted from the Official Journal of the EU