Cybersecurity governance
NIS2 readiness assessment
Connect the cybersecurity requirements relevant to your organisation with current practices and specific implementation actions.
Who it is for
Organisations assessing the impact of national requirements implementing NIS2, and suppliers facing security requirements from their customers.
What we cover
- Clarify the assessment basis using your activities, jurisdiction and information about applicable requirements.
- Review governance, risk, incidents, continuity, supply-chain security, access, vulnerabilities and training.
- Map the requirements in the agreed scope to documentation and evidence that controls operate.
- Distinguish identified gaps from unverified information and questions requiring further clarification.
What you receive
- A requirements and evidence matrix with assessment statuses.
- A prioritised implementation plan and a list of missing documents or processes.
- A management summary and a findings discussion with the responsible staff.
Your input
We need a description of your activities, existing policies, system and supplier information, previous assessments and access to relevant staff for interviews.
Scope and working arrangements
Scope and timing are agreed individually. The output is an advisory readiness assessment. A formal legal opinion on applicability, a mandatory independent audit and technical implementation are separate engagements.