NIS2 / Cyber Security
We help organisations understand their obligations under EU’s directive (Directive (EU) 2022/2555) NIS2 implementation, assess operational security risks and build credible evidence that their controls work in practice.
What we deliver
NIS2 is not simply another security checklist. We connect legal requirements with existing controls, operational dependencies and the decisions your organisation must be able to explain and substantiate.
Examine relevant activities, size criteria and statutory exceptions under section 28 of the German BSI Act. Clarify assumptions and the steps required where registration applies.
Typical outputDocumented scope assessment and a clear action list.
Review selected controls against section 30 requirements, including access, incident handling, recovery and supplier dependencies in the operating environment.
Typical outputPrioritised risks and practical remediation actions.
Link existing policies, configurations, tests and management decisions to applicable obligations. Identify missing evidence without producing paperwork for its own sake.
Typical outputEvidence map with owners and outstanding gaps.
Support management and technical teams with risk decisions, escalation paths and the delivery of agreed measures within clearly defined responsibilities.
Typical outputDecision support, assigned owners and practical next steps.
Working together
Scope, responsibilities and expected outputs are agreed around the actual requirement. We build on the security arrangements you already operate.
Establish applicable obligations, critical services and operational context.
Examine selected risks, controls, responsibilities and available evidence.
Turn gaps into proportionate actions and management decisions.
Assign follow-up, documentation and periodic review to working processes.
Before we begin
Whether the question is scope, risk management or evidence, describe your requirement. We will help define a proportionate engagement with clear outputs.
Share the essential context of your request.