NIS2 readiness
Get your company ready for NIS2, step by step
We find what you are missing against the NIS2 requirements, put the technical measures in place, write the policies and incident plan, and prepare your team.
The NIS2 directive (in Romania, Emergency Ordinance 155/2024, with DNSC as the authority) requires companies in many sectors to take concrete security measures, report incidents within short deadlines and involve management. For a small or mid-sized company the hard part is not the law but putting it into practice. That is what we do: we see where you stand, agree what needs doing, implement the technical measures and write the documents you need, in language management understands.
What you get
- Readiness review: what you already have and what is missing against NIS2, with a priority list
- Technical measures: two-step sign-in and SSO, backups with restore tests, logging and monitoring, patching, network segmentation, an inventory of devices and applications
- Incident response plan and help preparing notifications to DNSC (early warning within 24 hours, notification within 72 hours)
- Security policies and procedures fitted to your company
- Staff training and phishing simulations
- Periodic review so the measures stay current
Who it is for
- Companies in NIS2 sectors: energy, transport, health, water, digital infrastructure, manufacturing, food, postal services, waste management and more
- Suppliers to NIS2 companies who receive security requirements through contracts
- Companies not yet sure whether NIS2 applies to them
Frequently asked questions
Does NIS2 apply to my company?
It depends on your sector and size. Generally it covers medium and large companies (from 50 staff or over €10 million turnover) in the sectors listed in the directive's annexes, but some are covered regardless of size. Our guide helps you check, and a short conversation usually settles it.
What do I have to do if NIS2 applies?
Register with DNSC, apply risk-management measures (from backups and two-step sign-in to policies and training), report significant incidents within the legal deadlines and involve management, who are accountable for these measures.
I run a small business. Does it concern me?
Even if the law does not cover you directly, your NIS2 customers must check their suppliers and will ask you for security measures in contracts. The same measures protect you from ransomware and data loss anyway.
How long does it take to get ready?
The review usually takes a few days. Implementation depends on the starting point: a few weeks for a company with a good base, a few months for one starting from scratch.
Tell us what's getting in the way.
You talk directly to a technician, in Romanian, Hungarian or English.