Own field engineers
Regional, on call, covering hundreds of sites each
Critical sites
Unmanned sites, provable entry
Telecom exchanges, water treatment works, substations, thousands of sites, no reception, no security officer. Every visit tied to a reason.
Utilities & Critical Infrastructure
NIS2 access control for utilities and critical infrastructure
Your critical assets have nobody standing by
Who is on your sites
Subcontracted field workforce
At many operators, the majority of site visits
OT and SCADA specialists
Vendor engineers reaching the control systems
Mutual-aid and emergency crews
Arriving mid-incident, sometimes from another operator
What you are held to
NIS2 essential entity · CER · sector regulator
- Physical protection of the assets and of the control systems that run them
- Access to unmanned sites restricted, recorded and reviewable per site
- Management personally accountable for the risk measures, under NIS2
Where it breaks today
- One key type opens 1,000 cabinets, and copies have been circulating for decades
- A subcontractor's engineer keeps a working key long after the framework contract ends
- Nobody can produce, for a single site, who opened it in the last 12 months
NIS2 made this personal for your board. A key that opens 1,000 sites and cannot be withdrawn is no longer a facilities habit. It is a reportable risk with a name attached to it.
Utilities & Critical Infrastructure
Scenario
A fault call at 02:00
An unmanned site, a subcontracted engineer who has never been there, and a restoration clock already running.
The job creates the access
Dispatch raises the work order and the access follows the job. No keyring that has lived in a van for 6 years.
Qualified for that asset class
Competence and authorisation for this type of site are confirmed before dispatch commits the engineer to it.
Open at that site, for that job
The cabinet, the building or the control room. For the duration of the job and nowhere else on the network.
Closed when the job closes
Restoration is logged, the access ends with it, and the site's own visit history is written as it happens.
What changes
- Field access without a physical keyring. A leaver or a lost key stops being a network-wide event
- Subcontractor access ends on the day the framework contract does, across every site at once
- Per site: who opened it, when, and under which job, available without a site visit
Compliance
The regimes behind this
Questions
Frequently asked questions
How does Axxession support NIS2 for an essential entity?
Physical access to the assets and their control systems becomes a governed, evidenced process. It is restricted per site, recorded as it happens, and reviewable. Which is what the risk-management measures and management accountability under NIS2 require you to demonstrate.
Can access follow a dispatched work order?
Yes. Where we can read work orders from your dispatch or work-management system, the job creates the access. It is scoped to that site and that job, and closes when the job closes.
What happens when a framework contract ends?
Subcontractor access ends on the day the contract does, across every site at once. Access is held against the contracting company as well as the individual engineer.
The first step
Start with 1 site and 1 population.
You judge something that runs on your own site. Your access systems and readers stay where they are. If it earns its place, we extend it site by site.
One siteOne populationYour readers stay