An ISMS describes how security is governed. Oxygenn is designed to show what actually happens.

NIS2 and ISO 27001 are not the same. But a well-run ISMS can structure governance, risk, controls, evidence and improvement processes that are highly relevant to NIS2 implementation.