NIS2 in medium-sized companies
NIS2 impact and obligations must be checked based on the current legal situation, activity, sector, size and special rules. The specific scope is created after a brief inventory so that measures, participation and results match the actual needs.
When is NIS2 relevant for medium-sized businesses?
The topic becomes relevant when it concerns an important business process, an identifiable risk or a recurring manual burden. We start with the goal, the affected process and the existing status. This makes it clear whether a single measure is enough or whether a coordinated project is necessary.
How do we go about this?
What should be protected, what can happen during the test, who can be reached in an emergency. Assumptions are then tested on a limited, testable scope. Decisions, results and open risks remain documented so that the next step is understandable.
What is there at the end?
The result is not a general report, but a status tailored to the task with priorities, responsibilities and next steps. This includes the agreed evidence, a clear handover route and an open designation of remaining borders.
Frequently asked questions
Concise answers to the questions that usually arise before a decision.
How much does NIS2 cost for medium-sized businesses?
A reliable price requires goal, scope, existing status and necessary cooperation. After the initial classification, we state the assumptions and the price transparently.
How long does implementation take?
That depends on the initial status and the dependencies. We first cut a short, complete first section with visible results.
What is needed from our team?
A technically responsible person, access to the affected processes and timely decisions on the agreed test points.