NIS2 Compliance Readiness

Make NIS2 manageable, structured, and audit-ready. We turn cybersecurity, incident reporting, supplier risk, resilience, and management accountability into a practical implementation plan.

fpd-nis2 ~ scope · gaps · evidence

NIS2 LAYER

○GOVmanagement accountability

○IRincident reporting readiness

○SUPsupplier security

○REScontinuity and recovery

○EVDevidence structure

ROADMAP

✓ ISO 27001:2022 base mapped

✓ supplier risk prioritised

→ incident process wiring

○ management review pending

READINESS0%

GAPS

RISK

7 high

PLAN

12 wk

// nis2 readiness

A structured path through NIS2 pressure.

We use ISO/IEC 27001:2022 as the management-system backbone, then add the NIS2-specific layer for governance, reporting readiness, suppliers, resilience, and evidence.

NIS2 scopeISO 27001 baseIncident reportingSupplier security

NIS2 implementation layer

scope operational

gaps prioritised

owners assigned

evidence tracked

Step 01

Start and scope

Align business areas, processes, systems, suppliers, and existing documentation into an operational scope.

Step 02

Gap analysis

Review policies, controls, evidence, incident reporting, supplier security, resilience, and accountability.

Step 03

Action plan

Turn findings into owners, dependencies, timelines, priorities, and evidence requirements.

Step 04

Implementation

Support process design, documentation, evidence structure, operational routines, and training.

// operating model

Our approach

Not a paperwork project

NIS2 becomes an operating model: reviewable processes, clear ownership, and evidence that can be shown when asked.

ISO 27001 as the backbone

We assess your security and operational processes against ISO/IEC 27001:2022, then add NIS2-specific expectations.

Risk and supplier focus

Cyber risk management, supplier security, service provider controls, and resilience are prioritised by exposure.

Management accountability

Management reporting, Lead Implementer training, and decision routines make responsibility explicit.

What you get

NIS2 readiness review and prioritised roadmap

ISO/IEC 27001:2022 based gap analysis

Incident reporting and supplier security approach

Evidence structure for audits, reviews, and management reporting

Training for management and Lead Implementers

Start NIS2 readiness

Frequently asked

What does NIS2 implementation cost?

A focused readiness review usually starts in the low five-figure range. Core implementation often lands in the mid five figures; larger multi-site programmes can be higher.

How long does implementation take?

A readiness review and roadmap usually takes 2 to 5 weeks. Core implementation often takes 8 to 12 weeks; complex environments may need 4 to 6 months.

Is ISO/IEC 27001:2022 enough for NIS2?

Not automatically. ISO 27001 is a strong ISMS foundation. NIS2 adds governance, reporting, supplier security, resilience, and evidence expectations.