Board and team support
NIS2 compliance, from assessment to implementation
We help you meet NIS2 requirements through proportionate technical and organisational measures. Our specialists coordinate implementation, assess the results and can provide ongoing security leadership through CISO as a service.
Who this service is for
Implement NIS2 and maintain compliance as you grow
- NIS2 applies to your organisation and you need experienced support to implement its requirements.
- You need to address gaps identified in a security or compliance assessment.
- You want security measures that meet the requirements and fit your risks and resources.
- You need to improve risk management, supplier security or business continuity.
- You need a CISO to coordinate security and maintain compliance after the initial project.
See in about 2 minutes whether NIS2 is likely to cover your organisation, and as which kind of entity. Your answers stay on the page.
Take the free NIS2 scope checkWhat the work achieves
NIS2 compliance supported by practical security
-
Applicable requirements put into practice
The agreed NIS2 requirements are reflected in your processes, responsibilities and security measures. We help close the gaps identified at the start.
-
Security proportionate to your risks
Technical and organisational measures fit your operations and risk profile. Your team can apply them in daily work.
-
Compliance assessed by experienced specialists
Assessments and agreed audits establish how well the measures meet the requirements and where further improvements are needed. We agree independence requirements before an audit.
-
Ongoing CISO support
With an ongoing engagement, a senior CISO coordinates security work, reviews risks and helps maintain compliance as your organisation changes.
What we cover
The NIS2 work we take on
Compliance assessment and risk management
We assess your organisation against applicable NIS2 and national requirements, identify risks and gaps, and agree a prioritised implementation plan.
CISO as a service
We can assign an experienced CISO to lead the security programme, coordinate implementation and advise management on maintaining compliance. The engagement sets the responsibilities and time required.
Technical and organisational measures
We prepare security policies and help your IT team implement proportionate controls. We build on existing measures and include staff and management training where required.
Incident management and reporting
We prepare incident response and reporting procedures, define escalation and communications, and exercise the response with your team. We reflect the applicable national reporting deadlines.
Third-party risk management
We assess the risks of suppliers your operations depend on, establish security requirements and help organise proportionate reviews and follow-up.
Business continuity and recovery
We prepare continuity and recovery plans for critical processes, including backup arrangements. Exercises help your team assess whether the plans work and what needs improving.
How it works
From assessment to ongoing compliance
-
01
Assess
We review existing measures, risks and compliance gaps. Together we agree the scope, priorities and an implementation plan.
-
02
Implement
We prepare documentation and coordinate technical and organisational changes with your team. Training and exercises help put the new practices into use.
-
03
Verify
We assess implementation against the agreed requirements and carry out the planned tests or audits. Findings guide the remaining improvements.
- 04
Maintain
Under an ongoing CISO or advisory engagement, we review risks, changes and compliance progress, and coordinate further security work.
What we need from your team
- A list of your companies, services and main suppliers.
- A director who will approve the measures for the board.
- IT and operations owners for the safeguards we put in place.
- Your staff and board, for the practice incident and the training.
NIS2 Compliance
Your scope and current setup set the price
We price NIS2 work on the number of companies, services, systems and suppliers involved, and on how much is already in place. Ongoing support after the changes also affects the price.
We agree the work and price with you in writing before we start.
Common questions
Common questions
Related services
Free 30-minute call
Plan the work to meet NIS2
On a free 30-minute call, we look at what your company does, any findings so far and the NIS2 work to do first.