Pragmatic NIS2 preparation for medium-sized German businesses falling within the directive scope — gap assessment, risk management, supplier oversight, incident-reporting process. Designed for businesses that need to be ready without inventing an entire compliance department.
Pragmatic NIS2 preparation for medium-sized German businesses falling into scope — gap assessment, risk management, supplier oversight and incident-reporting process.
Przejrzysty model współpracy z jasnymi kamieniami milowymi.
First step: confirm whether your business is actually in NIS2 scope. Some businesses worry without basis; others miss obligations.
Written gap report against the obligations: risk management, governance, incident handling, supply chain, awareness.
Build out the missing pieces over 8–16 weeks: policies, risk register, supplier oversight, incident playbook, evidence pack.
Praktyczne, uczciwe oczekiwania — bez przesadnych obietnic.
You know whether NIS2 applies to you — without ambiguity.
Documented framework appropriate to your size.
Reporting flow tested at tabletop level.
Documented process for third-party risk.
Strony specjalistyczne wzmacniają ekosystem i kierują do właściwej usługi.
Zwięzłe odpowiedzi dla osób porównujących usługi Graham Miranda.
NIS2 covers essential and important entities above certain size and in specific sectors. We do the scope check first; many German SMEs assume they are in scope but are not — and vice versa.
We work to the German transposition (NIS2-Umsetzungs- und Cybersicherheitsstärkungsgesetz, NIS2UmsuCG). EU NIS2 underpins it. Implementation status is tracked.
No — NIS2 is not certification-based in the same way as ISO 27001. We help you build a defensible posture for regulator review.
We aim for a "demonstrably reasonable" posture appropriate to your size. Worst-case audit defence requires legal counsel; we provide the operational layer.
For financial-sector entities, DORA may apply alongside or instead. We coordinate on overlap; specialised financial-sector compliance partners brought in for DORA-specific work.
Typical: 3-6 months for an SME starting from a baseline IT setup. Compresses where existing ISO/BSI maturity is present.
Pragmatic NIS2 preparation for medium-sized German businesses falling into scope — gap assessment, risk management, supplier oversight and incident-reporting process.
