NIS2 compliance
for mid-sized companies
From impact analysis to audit preparation – as consulting with vCISO support and as a platform module. Designed specifically for mid-sized companies.
Why NIS2 now requires action
The NIS2 Implementation Act (officially: the NIS-2 Directive, transposed via the NIS2UmsuCG) has been in force since 6 December 2025 with no transition period. Around 29,500 companies in 18 sectors must now act – the BSI registration deadline already ended in March 2026.
29,500 companies affected
18 sectors – from energy and healthcare to digital trades and food production. From 50 employees or 10 million EUR turnover.
Personal liability of management
Management is personally liable for implementation. Fines of up to 10 million EUR or 2% of global annual turnover may apply.
24h reporting obligation for incidents
Early warning to the BSI within 24 hours, a full report within 72 hours, and a final report within one month.
The NIS2 lifecycle – 5 modules, one goal
Our modules build on one another and form a seamless path to NIS2 compliance.
Quick check
Where do I stand?
Documentation
Build the framework
Operational readiness
Operate securely
vCISO support
Ongoing guidance
Audit preparation
Pass the audit
The 5 NIS2 modules in detail
Each module can be used on its own – together they form a complete NIS2 compliance process.
NIS2 Quick Check
Applicability & gap analysis
A quick start to clarify whether and how your company is affected by NIS2 – with automatic classification and AI-assisted gap analysis.
- Questionnaire assistant capturing sector, size and key data
- Automatic classification: Essential / Important entity / Not affected
- AI-assisted gap analysis across all 11 NIS2 obligations (Art. 21 & Art. 23)
- Readiness indicator and 3-phase measures roadmap
Mandatory documentation
12 core NIS2 documents
Management and AI-assisted creation of the 12 core NIS2 documents – from the IT security policy to the incident response plan.
- AI draft generator per document (sector-specific)
- Approval workflow: Draft → Under review → Approved
- Progress display: X of 12 documents approved
- Integrated Markdown editor with preview
Operational Readiness
Prove secure operations
From document to demonstrably secure operations: M365 baseline, operational activities and 6 KPIs for overall readiness.
- M365 baseline checklist with 22 hardening points
- 10 operational activities incl. AI templates for training & phishing simulations
- 6 KPIs: Secure Score, MFA rate, training rate and more
- Overall readiness from baseline, activities and KPIs
vCISO support
Ongoing support on retainer
Continuous support from a virtual CISO – with monthly reviews, an annual plan and an escalation concept incl. BSI reporting deadlines.
- Monthly security reviews & quarterly reviews (QBR)
- 12-month annual plan with focus topics per month
- Escalation & emergency concept with BSI reporting deadlines
- Retainer tiers: Starter / Standard / Pro
Audit preparation
Pass the audit
Structured preparation for NIS2 audits and BSI inspections – with mock audit, evidence folder and AI assistant.
- 11 audit areas with typical auditor questions
- Evidence folder: 11-folder structure with status tracking
- Mock audit with traffic-light rating (green/yellow/red)
- AI assistant for the question catalogue and gap log
Two paths to your NIS2 compliance
Consulting and platform – strong on their own, unbeatable together.
NIS2 consulting
vCISO support at a fixed price
- Applicability & gap analysis
- Building the mandatory documentation
- Support with BSI registration
- Operational cybersecurity measures
- Ongoing vCISO support (retainer)
- Audit preparation & mock audit
NIS2 platform
AI-assisted compliance module
- NIS2 Quick Check with automatic classification
- AI draft generator for all 12 mandatory documents
- M365 baseline & operational readiness dashboard
- 6 KPIs for demonstrable cybersecurity
- Mock audit with traffic-light rating
- Multi-tenant for consultants & groups
Frequently asked questions about NIS2
Ready for your NIS2 compliance?
Let us check together where you stand – free and without obligation.