ISO/IEC 27001
The international ISMS standard. The most common way to prove NIS2 measures are in place.
Overlap with NIS2: high
KEEL COMPLY
NIS2, without the panic.
Find out in three minutes whether NIS2 applies to you, what it asks of you and what to do first. In plain language.
NIS2 scope check
Question 1 of 3
Not legal advice · no data stored
INDICATIVE RESULT
Likely in scope as an important entity.
Expect NIS2 risk-management and reporting duties, with supervision after incidents or indications of non-compliance.
This check is indicative and not legal advice. National implementations differ; verify with counsel.
WHAT NIS2 WOULD ASK OF YOU
- 01 Risk managementArticle 21 measures: policies, incident handling, business continuity, supply-chain security, MFA, encryption.
- 02 Reporting dutiesEarly warning within 24 h, notification within 72 h, final report within one month (placeholders to verify).
- 03 Management accountabilityManagement approves measures, oversees them and can be held personally liable.
- 04 TrainingMandatory cybersecurity training for management; regular training for staff.
READINESS ROADMAP
From “are we in scope?” to audit-ready in six months.
Month 1
Month 2
Month 3
Month 4
Month 5
Month 6
Scope & gap analysis
Governance & management training
Risk management & policies
Technical measures
Incident reporting process
Internal audit & evidence
Typical for a 250-person company with an existing IT team · illustrative · weeks
FURTHER FRAMEWORKS
One ISMS, several certificates.
TISAX
Required by German OEMs for suppliers handling sensitive data or prototypes.
Overlap with NIS2: medium
BSI IT-Grundschutz
Detailed German methodology, common in the public sector and KRITIS.
Overlap with NIS2: high
DORA
Digital operational resilience for EU financial entities and their ICT providers.
Overlap with NIS2: medium
CHECKLIST
The 42-point NIS2 checklist.
Every Article 21 measure broken into checkable items, with owner and evidence columns. Excel and PDF.