Regulatory scoping

We determine whether NIS2 applies to your organization and which obligation tier you fall under:

• Industry classification
• Organization size and impact assessment
• Mapping to higher vs. lower obligations
• Evaluation of regulated services

Outcome: a defensible scope statement.

Gap analysis

We benchmark your cybersecurity posture against NIS2 and related legislation to surface real gaps:

• Identification of non-compliant areas
• Review of existing policies and controls
• Mapping to systems, processes, and responsibilities
• Evidence-based documentation

Outcome: your maturity baseline.

Solution plan

We build a business-aligned roadmap to close every gap — scoped, costed, and ready to execute:

• Technical Gaps solution
• Cyber Security Manager as Service
• Policy and process updates
• Budget and effort estimation

Outcome: a costed roadmap and budget.

Deployment

We implement the organizational and technical controls that make compliance real:

• ISMS design and rollout updates
• Risk management framework
• Supplier security requirements
• Incident response setup/ Incident Response Plan
• Monitoring and logging
• Business continuity alignment
• Disaster Recovery plan

Outcome: production-ready controls.

Audit readiness

We get your organization ready for:

• Regulatory inspections (NÚKIB)
• External audits
• ISO 27001 certification
• Internal governance reporting

• Executive dashboards
• Compliance reporting
• Management briefings
• Evidence documentation

Outcome: inspection-ready documentation and governance.