The EU NIS2 directive is in force. Most organisations are unsure whether they are in scope — and even less sure what is expected of them. This kit turns the obligations into concrete work: scoping, risk management, policy and steady preparedness to report.
Many organisations react to NIS2 in one of two ways: they wrongly assume they are out of scope, or they start an ad-hoc, informal documentation effort that obliges nothing. Both are risky.
The directive expects something concrete: accountable management, risk management operating across ten core areas, and incidents reported within tight deadlines (24 hours · 72 hours).
This kit makes that work manageable. You get the instruments to determine scope, organise risk and build documentation you can account for.
A practical sequence that connects the directive with practice.
Use the scope-assessment tool and the sector reference sheet to establish whether you are an essential or important entity, and whether the directive applies to you.
Fill in the risk register and the technical and organisational measures matrix across the ten core areas, and capture the relationships in a RACI.
Develop policy, training and continuity, document evidence and know your reporting chains — so you can send an early warning within 24 hours and a full notification within 72 hours.
Every file is editable and renameable. Expand a group to see what's inside and what you can use it for.
From first scoping to the 30-day roadmap and the report afterwards.
Determine whether NIS2 applies and where the gaps are.
The backbone: risk register, RACI and evidence.
From charter to board reporting.
Operationalising into policy and technical/organisational measures.
Prepared for the 24-hour early warning and 72-hour notification.
A fragment from the risk register: every risk has a severity level and points to the evidence that it is managed.
| RISK | CORE AREA | LIKELIHOOD | IMPACT | SCORE | EVIDENCE |
|---|---|---|---|---|---|
| Unauthorised access to customer data through a leaked third-party account | 7 · Access control | Medium | High | 15 | HIGH |
This kit is reviewed regularly against changing regulation. The recent history is below; the kit version is bumped with every change.
| Date | Version | Document | What changed |
|---|---|---|---|
| 2026-08-22 | 1.0 | All 32 files (1 ZIP) | First product release. |
All 32 files in one download, right after payment. No subscription, no recurring fees.
The complete NIS2 Readiness Kit as a downloadable zip with all 32 editable files.
Determine your scope and build the documentation — before the question is asked of you.
See what's inside
