Skip to content

Board and team support

NIS2 compliance, from assessment to implementation

We help you meet NIS2 requirements through proportionate technical and organisational measures. Our specialists coordinate implementation, assess the results and can provide ongoing security leadership through CISO as a service.

Who this service is for

Implement NIS2 and maintain compliance as you grow

  • NIS2 applies to your organisation and you need experienced support to implement its requirements.
  • You need to address gaps identified in a security or compliance assessment.
  • You want security measures that meet the requirements and fit your risks and resources.
  • You need to improve risk management, supplier security or business continuity.
  • You need a CISO to coordinate security and maintain compliance after the initial project.

See in about 2 minutes whether NIS2 is likely to cover your organisation, and as which kind of entity. Your answers stay on the page.

Take the free NIS2 scope check

What the work achieves

NIS2 compliance supported by practical security

  • Applicable requirements put into practice

    The agreed NIS2 requirements are reflected in your processes, responsibilities and security measures. We help close the gaps identified at the start.

  • Security proportionate to your risks

    Technical and organisational measures fit your operations and risk profile. Your team can apply them in daily work.

  • Compliance assessed by experienced specialists

    Assessments and agreed audits establish how well the measures meet the requirements and where further improvements are needed. We agree independence requirements before an audit.

  • Ongoing CISO support

    With an ongoing engagement, a senior CISO coordinates security work, reviews risks and helps maintain compliance as your organisation changes.

What we cover

The NIS2 work we take on

  • Compliance assessment and risk management

    We assess your organisation against applicable NIS2 and national requirements, identify risks and gaps, and agree a prioritised implementation plan.

  • CISO as a service

    We can assign an experienced CISO to lead the security programme, coordinate implementation and advise management on maintaining compliance. The engagement sets the responsibilities and time required.

  • Technical and organisational measures

    We prepare security policies and help your IT team implement proportionate controls. We build on existing measures and include staff and management training where required.

  • Incident management and reporting

    We prepare incident response and reporting procedures, define escalation and communications, and exercise the response with your team. We reflect the applicable national reporting deadlines.

  • Third-party risk management

    We assess the risks of suppliers your operations depend on, establish security requirements and help organise proportionate reviews and follow-up.

  • Business continuity and recovery

    We prepare continuity and recovery plans for critical processes, including backup arrangements. Exercises help your team assess whether the plans work and what needs improving.

How it works

From assessment to ongoing compliance

  1. 01

    Assess

    We review existing measures, risks and compliance gaps. Together we agree the scope, priorities and an implementation plan.

  2. 02

    Implement

    We prepare documentation and coordinate technical and organisational changes with your team. Training and exercises help put the new practices into use.

  3. 03

    Verify

    We assess implementation against the agreed requirements and carry out the planned tests or audits. Findings guide the remaining improvements.

  4. 04

    Maintain

    Under an ongoing CISO or advisory engagement, we review risks, changes and compliance progress, and coordinate further security work.

What we need from your team

  • A list of your companies, services and main suppliers.
  • A director who will approve the measures for the board.
  • IT and operations owners for the safeguards we put in place.
  • Your staff and board, for the practice incident and the training.

NIS2 Compliance

Your scope and current setup set the price

We price NIS2 work on the number of companies, services, systems and suppliers involved, and on how much is already in place. Ongoing support after the changes also affects the price.

We agree the work and price with you in writing before we start.

Plan your NIS2 work

Common questions

Common questions

Free 30-minute call

Plan the work to meet NIS2

On a free 30-minute call, we look at what your company does, any findings so far and the NIS2 work to do first.