Consulting packages at a fixed priceAI governance & NIS2
Productised packages for AI governance (EU AI Act) and NIS2 with fixed prices. Start small and scale as you grow.
AI governance packages
Land → Expand → Scale: start with an inventory and risk triage, then build out your AI governance modularly all the way to audit readiness.
Quick start
AI system inventory & risk triage
Register of all AI systems + EU AI Act mapping
AI Governance Starter Kit
Roles, gates G1–G3 + templates
EU AI Act Readiness Compact
Obligation logic + evidence plan
Modular build-out
Governance Operating Model
Lifecycle G1–G5 + KPIs
Data Governance “Fit for AI”
Data sheets, bias/fairness
Model/GenAI Governance
Security, guardrails, logging
Vendor Governance
Due diligence, exit strategy
Audit readiness & operations
ISO/IEC 42001 AIMS Readiness
Gap analysis + roadmap
AIMS implementation
Management system + audit preparation
Managed AI Governance
Ongoing reviews, KPI reporting
NIS2 packages
Four fixed-price projects that build on each other – pragmatic, remote-first and optimised for Microsoft 365. Each package can also be booked on its own.
Quick Check
Clarity, fast: are you in scope – and where do you stand?
- NIS2 applicability check
- Maturity and gap analysis
- Prioritised roadmap with next steps
Baseline Compliance
The foundation: all mandatory documents under Art. 21 – practical, not shelfware.
- Policies and mandatory documentation under Art. 21
- Business impact analysis & risk assessment
- Risk acceptance by management
- Supplier and service provider linkage
Operational Readiness
From paper to practice: your organisation is prepared for an emergency.
- M365 hardening & IT monitoring process
- Awareness training & phishing simulation
- Tabletop exercise incl. recovery measurement
- Situation report for management
Audit Preparation
Able to provide evidence when audited.
- Review of 11 audit areas
- Structured evidence folder
- Mock audit with action list
vCISO support
Your external information security officer on a retainer basis: regular reviews, reports to management and a dedicated contact when things get serious.
Starter
4–6
hrs/month
1.2–1.8k EUR/month
Standard
8–12
hrs/month
2.5–3.5k EUR/month
Pro
15–20
hrs/month
4.5–6.5k EUR/month
Response to severe incidents (levels S3/S4) beyond the monthly hours and additional workshop days are billed at a daily rate.
Crisis response included
The crisis playbook with escalation levels S1–S4, reporting deadlines and crisis communication is an integral part of Operational Readiness and vCISO support – not a separate package.
Note: our consulting does not replace legal advice or certification. We cannot guarantee NIS2 conformity – we create the basis for achieving it verifiably.
More about the NIS2 softwareThink AI governance and NIS2 together
Many companies are affected by both regulations. The requirements overlap heavily – tackling them together saves effort and avoids duplicate structures.
- One reporting line to management
- One shared risk register
- One supplier and service provider management
- One software solution for evidence and audits
Which package fits you?
In 30 minutes we will clarify where you stand – on AI governance, NIS2 or both – and which package fits you best.
Book a free risk triageFrequently asked questions about our consulting packages
All packages have fixed prices: the quick start (LAND) costs EUR 12–30k over 2–4 weeks, the modular expansion (EXPAND) EUR 25–50k over 4–8 weeks. Audit readiness and operations (SCALE) cost EUR 15–40k as a project or EUR 3–8k per month as a retainer.
The NIS2 Quick Check costs EUR 2.5–4.5k and takes 1–2 days. It covers the NIS2 applicability assessment, a maturity and gap analysis and a prioritised roadmap with next steps.
Four fixed-price projects that build on each other and can also be booked individually: Quick Check (EUR 2.5–4.5k), Basic Compliance with mandatory documentation under Art. 21 (EUR 9.5–14.5k), Operational Readiness (EUR 12–18k) and Audit Preparation (EUR 6.5–10k).
vCISO support is available as a retainer: Starter with 4–6 hrs/month for EUR 1.2–1.8k, Standard with 8–12 hrs/month for EUR 2.5–3.5k and Pro with 15–20 hrs/month for EUR 4.5–6.5k per month.
Yes. The requirements overlap considerably. Implementing both together means one shared risk register, one report to management, one supplier management process and one software for evidence – avoiding duplicate structures.
No. Our consulting replaces neither legal advice nor certification, and we do not guarantee compliance. We create the basis for achieving compliance in a demonstrable way.
Yes. We build on your existing structures instead of replacing them: records of processing, data protection impact assessments, risk registers and existing policies feed into AI governance and NIS2. If you run an ISO 27001 ISMS, many NIS2 requirements are already covered – we show you the remaining gaps. We do not replace your data protection officer or an ISO certification; both remain with you or your existing partners.
With the free 30-minute risk triage. We clarify where you stand on AI governance, NIS2 or both, and which package suits you best.
Talk to us
Whether a quick question or in-depth consulting – we are here for you.