NIS2 Gap Assessment

NIS2 Gap Assessment

Does NIS2 apply to your organization? Then you must comply with this EU directive as of October 2024. Our NIS2 Gap Assessment helps you find the gaps between your current cybersecurity measures and the requirements of NIS2. Using this information you can take action to reach full NIS2 compliance.

Why the NIS2 Gap Assessment?

To raise the cyber resilience of its member states, the EU has adopted the the Network and Information Security (NIS2) directive. This directive applies to around 150.000 European organizations in important sectors such as transport, government, energy and health.

If NIS2 applies to your organization, you have a number of obligations to consider. For instance, you are required to adopt a risk-based approach and implement appropriate security measures. You are also required to report significant incidents impacting the continuity of essential services to the relevant competent authority within 24 hours. We can help you prepare for compliance to NIS2.

How the NIS2 Gap Assessment works

To assess the security maturity level of your organization and the gaps in your organization when it comes to NIS2 compliance, our experts use a selection of the ISO 27001 standard. This is expanded to incorporate all additional NIS2 requirements not yet covered by default. The outcome is visualized in a graphic like this one:

You will then receive a report with a description of your maturity, the gaps we have identified in regards to NIS2 and concrete recommendations for improvement. With these you can take action to reach full NIS2 compliance.

Depending on the gaps shown, we can help you with implementation. We also offer other cybersecurity services you might need to close certain gaps, as well as Risk Management Services and Supply Chain Security Services.