Key Points:
- ✓Broader Scope: NIS2 affects companies from 18 critical and important sectors such as energy, transport, health, public administration, and digital infrastructure.
- ✓Mandatory Security Measures: Companies must implement risk and security measures such as vulnerability management, supply chain security, and incident response.
- ✓Reporting Obligations: Significant security incidents must be reported within 24 hours.
- ✓Management Liability: Management bears direct responsibility for compliance.
- ✓Stricter Sanctions: NIS2 provides for significantly higher penalties, comparable to the GDPR.

condignum NIS2 Solution
A uniformly high level of cybersecurity in the EU, including resilient digital services and secure supply chains. "NIS(2) Solution" means that companies do not need to build security, risk, and compliance capabilities internally, but receive them as a continuous, structured service. This turns information security into an ongoing process that is professionally managed and transparently governed.
Start
The starting point is the NIS2 Readiness Check.
Results
- ✓Report on the current status
- ✓List of open TODOs
Requirements
- ✓None
Process
- ✓4-hour workshop for joint assessment with an accredited Quaste auditor on the condignum platform
- ✓Generation of the PDF report
Including
- ✓3 months access to the condignum Security Platform
