Companies in regulated sectors
Entities to which the obligations apply directly.
Cyber security regulation under the NIS2 directive has widened the circle of obliged entities and added duties in risk management and incident reporting. The first step is to find out whether it applies to you.
It is unclear whether your company falls within the regulated sectors and in which category.
You need to handle registration and communication with the national cyber security authority.
Processes and internal roles are not set up.
There are no procedures for reporting within the prescribed deadlines.
Security obligations need to be passed on through supplier contracts.
We establish whether you are an obliged entity and to what extent.
Comparison of your current state against the requirements.
Preparation of procedures including incident reporting.
Adding security clauses to your contracts.
Advice on the liability of governing bodies.
Entities to which the obligations apply directly.
Companies to which the requirements are passed on contractually.
We assess how the regulation applies to your company.
We identify what needs to be added against the obligations.
We prepare a plan with deadlines and responsibilities.
We support implementation and verify that it works.
Before any measures, we establish whether and how the regulation applies to you at all.
The output is a set of measures with deadlines and responsibilities, not a list of requirements.
We will assess the scope of the regulation and prepare an action plan with deadlines.
Contact us to schedule a consultation
Please briefly describe what you need help with.
We will contact you and suggest the best course of action.