Annex I — Essential Entities · Energy
🛢️NIS2 for Oil & Refineries — deadlines, obligations, fines
Oil & Refineries fall under NIS2 (Directive (EU) 2022/2555 + Romanian Emergency Ordinance 155/2024). See Art.21 obligations, deadlines, max fines and compliance roadmap for Annex I.
📋 Key obligations
- ▸ SOC pe rafinării + depozite strategice
- ▸ Securitate operațională OT-IT segregation
- ▸ Plan răspuns la incidente în 24h
- ▸ Audit supply chain (vendori critici)
- ▸ Encryption pentru datele de inventar strategic
⚠️ Typical threats
- • Atacuri pe sistemele de procesare/blending
- • Industrial espionage pe rețete de rafinare
- • Sabotaj operațional pe ICS
💰 Maximum fines
Max 10 mil. EUR sau 2% cifra afaceri
📊 Romania compliance status
OMV Petrom, Rompetrol în implementare. Termen Romania: octombrie 2024 (Legea 244/2024) — deja restanță.
🛡️ How CAI Technology helps
AEGIS — Observability + SecOps with AI
Unified SIEM for on-premise DCs: logs + metrics + threat detection + AI incident analysis.
ARTEMIS — AI Pentest · Hunt · Reveal · Strike
Autonomous pentest platform with 5 AI agents and 6 audit types. From 2€ per scan, no subscription.
Lexnomia — EU Compliance Audit Platform
Self-serve compliance audit across 7+ EU regulations: GDPR, NIS2, DORA, EU AI Act, ISO 27001, CRA, DSA.
Are you in the oil & refineries sector?
Free NIS2 audit for companies with 50+ employees. We reply within 24 business hours.
Request audit →