NIS2 readiness · compliance

NIS2 readiness — confidently ready for the new obligations

We clarify whether NIS2 applies to you, uncover the gaps, and give you a prioritized plan for compliance — tailored to your actual obligations, not in general terms.

Scope clarification Gap analysis Action plan Evidence
— Are you affected?

Does NIS2 apply to you too?

NIS2 regulates more broadly and more strictly than its predecessor. It's worth clarifying early whether it applies to you — and what that means specifically.

01 / SECTOR

Regulated sectors

Organizations in energy, transport, healthcare, digital services, manufacturing and other designated sectors.

02 / SIZE & CHAIN

Size and supply chain

Typically medium and large organizations — but the requirement can also reach smaller companies through the supply chain.

03 / UNCERTAIN

Not sure?

The first step is always clarifying your scope — together, for your specific situation.

— How we work

From scope to evidence

Structured, step-by-step preparation that tackles the highest-risk gaps first.

1. Scope and applicability

We clarify whether NIS2 applies to you and exactly which obligations affect you — tailored to your sector and size.

2. Gap analysis

We map the current state and compare it against the NIS2 requirements — so you can see where and how big the gap is.

3. Action plan and evidence

We provide a prioritized plan and the documentation that proves compliance — taking the biggest risks first.

— What you get

Not a paper mill — working protection

NIS2 isn't administration for its own sake: behind the obligations lies real risk reduction. We build the preparation so that compliance comes with actual protection.

Every step is transparent and traceable — management also sees clearly where you stand and what the next step is.

  • Clarified scope and the obligations that apply to you.
  • A prioritized, realistic action plan.
  • Documented evidence to prove compliance.
  • Support for management accountability with transparent reports.
— FAQ

Frequently asked questions about NIS2

We answer most questions here — for the rest, write to us on the consultation form.

+What is NIS2 and who does it affect?
NIS2 is an EU cybersecurity directive that imposes stricter obligations on a broader range of organizations. It typically affects medium and large organizations in defined sectors (e.g. energy, transport, healthcare, digital services, manufacturing), but it can also reach smaller companies through the supply chain.
+How do I know whether NIS2 applies to my company?
Whether you're in scope depends on the sector, the organization's size and the nature of the activity. As the first step of preparation, we clarify together whether you're affected and the range of obligations that apply to you, so we can plan for your situation specifically rather than in general terms.
+What does NIS2 preparation mean in practice?
We map the current state, prepare a gap analysis against the NIS2 requirements, then provide a prioritized action plan. We also help compile the risk management measures and the documentation that proves compliance.
+How long does preparation take?
It depends on the size of the organization and the current maturity level. After the gap analysis we provide a realistic schedule that tackles the highest-risk shortcomings first, so the most essential protection is built up first.
+Does preparation also include technical testing?
Yes, where warranted. NIS2's risk management requirements are often accompanied by vulnerability assessment and pentesting, which we carry out alongside the preparation so that compliance comes with actual protection.
+How do we get started?
Request a consultation on the form: tell us which sector and scale you operate at, and what your goal is. We'll get back to you with the recommended first steps — transparently, tailored to your actual obligations.
— Consultation

Request a NIS2 consultation

Tell us which sector and scale you operate at and what your goal is — we'll get back to you with the recommended first steps.