NIS2 consulting and audit
We establish whether your organisation is an essential or important entity, which of the legal requirements apply to you concretely, and in what order they should be addressed. Then we stay with you through implementation, testing and preparation for supervision.
What the engagement covers
Scope is agreed after the initial assessment, so you pay for the work your obligations actually require.
Scope assessment
Stage 1A documented determination of whether you are an essential entity, an important entity, or outside scope — with the reasoning, so it stands up if questioned.
Gap analysis
Stage 2Your current technical and organisational state measured against each applicable requirement, with findings ranked by legal exposure rather than by vendor preference.
Documentation
Stage 3Risk analysis, security policies, incident handling and reporting procedures, business continuity, supply-chain assessment, access control and asset management.
Implementation support
Stage 3Practical assistance with the technical measures — not just a list of controls handed over, but help getting them in place and evidenced.
Audit and inspection readiness
Stage 4Preparing the evidence file, rehearsing the questions a supervisory authority will ask, and closing the gaps that would show up first.
Why the order matters
Most organisations that come to us have already bought something. The recurring problem is not a lack of tools — it is that nobody established which obligations applied before spending began. Measures then turn out to be either insufficient against the law or disproportionate to the actual risk.
- Management accountability
- Legal responsibility sits with the management bodies and cannot be transferred in full to a provider or to IT.
- Supervision
- Essential entities face proactive supervision; important entities are checked mainly after an incident or complaint.
- Supply chain
- Obligations reach suppliers of regulated entities, which is how many organisations discover they are in scope.
- Training
- Staff and management training is an explicit requirement, not a recommendation.
Send us your sector and headcount. We will tell you where you stand.
The preliminary conversation costs nothing. If you are outside scope, we will say so.
- Phone
- +40 763 204 739
- [email protected]