Services
NIS2 compliance consulting
We help you build the technical and organizational measures required by NIS2 -- from the initial risk analysis to the documentation and training required for each of the directive's 10 categories.
Based on real implementation experience of a full NIS2 compliance program for an energy-sector company, not just theoretical knowledge of the directive.
What you get
Concrete deliverables, not just recommendations
Written security policies, approved by leadership
Risk register and treatment plan
Tested incident response plan
Awareness training program, with progress measured over time
Documentation ready for an external audit or regulatory inspection
What we cover
Risk analysis and written security policies
Incident management procedures
Business continuity and disaster recovery plan
Supply chain and partner security
Vulnerability management and secure development
Periodic evaluation of the effectiveness of implemented measures
Cyber hygiene and awareness training
Cryptography and data protection
HR security, access control, and asset inventory
Multi-factor authentication and secure communications
How we work
- 1Initial assessment of the current maturity level, across all 10 categories required by NIS2
- 2Prioritization -- we identify the gaps with real impact, not just a long list of generic recommendations
- 3Drafting the required policies, procedures, and documentation (risk, incidents, continuity)
- 4Assisted implementation, together with your technical team or outsourced IT provider
- 5Awareness training for employees, delivered and measured through the SecureAware platform
Who it's for
- Companies in sectors directly covered by NIS2 (energy, transport, health, water, digital infrastructure, ICT, postal, waste, manufacturing, public administration)
- Suppliers and subcontractors bidding on public contracts who need to demonstrate security measures to public-sector clients
- Companies that want to prepare before being officially notified that they fall under the directive
An important note
This consulting helps you build the technical and organizational measures required by NIS2 -- we do not issue an official compliance certification. We recommend your own legal review to determine exactly how your company falls under the directive.
Want to know where to start?
Book a short call -- we can start from the free NIS2 assessment or go straight into a discussion about your company's situation.