RETURN TO NEXUS
Ne Plus UltraNPU-LEGAL-COMP-2026

Codified Governance.

Compliance is not a quarterly event. NPU enforces continuous audit through Policy-as-Code.

Governing Entity: Ne Plus Ultra Global Solutions s.r.o.
Jurisdiction: Slovak Republic / Switzerland
Last Amended: 2026-01-15
§ 1

NIS2 Directive Readiness

Our infrastructure blueprints are pre-hardened to meet the "Essential Entity" resilience requirements of the EU NIS2 Directive.

SUPPLY CHAIN SECURITY

All third-party dependencies are inventoried, risk-assessed, and subject to continuous vulnerability monitoring.

INCIDENT REPORTING

Automated incident classification and notification workflows ensure compliance with 24-hour reporting requirements.

§ 2

Industrial Alignment (IEC 62443)

For industrial clients, NPU enforces logical air-gapping between IT (Corporate) and OT (Operational) networks, safeguarding PLCs and SCADA systems.

NETWORK SEGMENTATION

Complete isolation between enterprise IT systems and operational technology networks. No direct path exists between corporate email and industrial control systems.

PROTOCOL FILTERING

Only whitelisted industrial protocols (Modbus, OPC-UA, etc.) are permitted across OT network boundaries, with deep packet inspection.

UNIDIRECTIONAL GATEWAYS

Where data must flow from OT to IT (telemetry), hardware-enforced unidirectional data diodes prevent any reverse traffic.

§ 3

Continuous Audit

NPU utilizes "Policy-as-Code" to scan environments 24/7, automatically remediating configuration drift that violates regulatory standards.

ZERO-DRIFT STANDARD (ZDS)
ACTIVE
Scan FrequencyContinuous
Remediation Window60 minutes
Policy Coverage2,847 rules
False Positive Rate< 0.01%
§ 4

Regulatory Framework Alignment

NPU infrastructure blueprints are designed to support compliance with the following regulatory frameworks:

NIS2EU Directive
GDPRData Protection
IEC 62443Industrial Security
FADPSwiss Privacy
ISO 27001ISMS
SOC 2Type II
TOGAF 10Architecture
COBIT 2019Governance
§ 5

Audit & Certification

NPU undergoes annual third-party audits. Current certifications and attestations are available upon request under NDA.

  • Annual penetration testing by independent security firms
  • Continuous vulnerability scanning and remediation
  • Quarterly compliance reviews with external auditors
  • Client audit rights upon reasonable notice
§ 6

Compliance Inquiries

For compliance documentation, audit reports, or regulatory inquiries, contact the NPU Compliance Office:

Ne Plus Ultra Global Solutions s.r.o.

Compliance & Governance Office

Bratislava, Slovak Republic

Document Version: NPU-COMP-v2.1-2026 | Classification: PUBLIC