Pragmatic NIS2 preparation for medium-sized German businesses falling within the directive scope — gap assessment, risk management, supplier oversight, incident-reporting process. Designed for businesses that need to be ready without inventing an entire compliance department.
Pragmatic NIS2 preparation for medium-sized German businesses falling into scope — gap assessment, risk management, supplier oversight and incident-reporting process.
Een transparant samenwerkingsmodel met heldere mijlpalen.
First step: confirm whether your business is actually in NIS2 scope. Some businesses worry without basis; others miss obligations.
Written gap report against the obligations: risk management, governance, incident handling, supply chain, awareness.
Build out the missing pieces over 8–16 weeks: policies, risk register, supplier oversight, incident playbook, evidence pack.
Praktische, eerlijke verwachtingen — geen overdreven beloftes.
You know whether NIS2 applies to you — without ambiguity.
Documented framework appropriate to your size.
Reporting flow tested at tabletop level.
Documented process for third-party risk.
Specialistische pagina’s versterken het ecosysteem en leiden bezoekers naar de juiste dienst.
Beknopte antwoorden voor bezoekers die Graham Miranda-diensten vergelijken.
NIS2 covers essential and important entities above certain size and in specific sectors. We do the scope check first; many German SMEs assume they are in scope but are not — and vice versa.
We work to the German transposition (NIS2-Umsetzungs- und Cybersicherheitsstärkungsgesetz, NIS2UmsuCG). EU NIS2 underpins it. Implementation status is tracked.
No — NIS2 is not certification-based in the same way as ISO 27001. We help you build a defensible posture for regulator review.
We aim for a "demonstrably reasonable" posture appropriate to your size. Worst-case audit defence requires legal counsel; we provide the operational layer.
For financial-sector entities, DORA may apply alongside or instead. We coordinate on overlap; specialised financial-sector compliance partners brought in for DORA-specific work.
Typical: 3-6 months for an SME starting from a baseline IT setup. Compresses where existing ISO/BSI maturity is present.
Pragmatic NIS2 preparation for medium-sized German businesses falling into scope — gap assessment, risk management, supplier oversight and incident-reporting process.
