Readiness / Evidence / Practical action

Understand your NIS2 readiness. Set clear priorities.

Bring your security practices, responsibilities and supporting evidence into a structured review. Identify what needs attention and build a practical plan around the national requirements relevant to your organisation.

Request a NIS2 readiness scoping call →

Work directly with the senior practitioners delivering your engagement.

Confirm the basis for the review

Identify the organisation, sector, jurisdictions and agreed applicability. NIS2 is implemented through national legislation; readiness work should identify the relevant national requirements rather than assume one identical process across countries.

Review governance and security practices

Review accountability, risk management, incident preparation, continuity and supplier oversight within the agreed scope.

Separate documented intent from operating evidence

A written procedure and a record showing it operates answer different questions. Record what is written, what happens and what can be demonstrated.

Prioritise the gaps

Consider risk, urgency, dependencies and available capacity. Make uncertainty and missing evidence explicit.

Choose the next step

A NIS2 readiness engagement is scoped and priced separately. Ongoing Fractional CISO support can help organise agreed security priorities; selecting a retainer does not itself establish readiness.

Questions before you start

Which country’s requirements matter?

Identify the relevant jurisdictions and national requirements during scoping. Do not assume one entity or country review covers the whole group.

Can existing security work be reused?

Existing policies, assessments and operating records can inform the review, subject to their scope, currency and relevance.

Does this provide certification?

No. The engagement supports readiness and evidence planning, not certification or a compliance guarantee.

Readiness support does not guarantee compliance, certification, regulatory acceptance or customer approval. Legal applicability and material interpretations require appropriately scoped review.

European Commission information on national NIS2 transposition ↗

Last reviewed: 26 October 2026. Consult the current official source for regulatory developments.

Explore Fractional CISO support →