Home

🇪🇺 Official European Union Framework: Directive (EU) 2022/2555 Emergency Hotline: +359 888 258 530 | Mandatory since 18 Oct 2024

Home

NIS2 Compliance ⌄

UNDERSTAND THE DIRECTIVE NIS2 Compliance Overview

About the Directive → See scope and obligations. Essential vs Important → Entity classification. C-Level Liability → Penalties and oversight. Supply Chain Security → Third-party risk control.

Solutions ⌄

FROM OBLIGATION TO OPERATION Explore Our Solutions

GAP Analysis & Audit → Prioritise your risks. Managed SOC → 24/7 detection & response. Policy Framework → Governance evidence. Employee Training → Build staff awareness.

Checklist About Advison Contact Start Audit →

Home / NIS2 Compliance / NIS2 Readiness Checklist

NIS2 Readiness Checklist

A quick, private self-assessment of your organisation’s most important compliance controls.

NIS2 RESOURCES Directive overview › Entity classification › Liability & penalties › Supply chain security › Readiness checklist ›

NEED GUIDANCE?

Speak with an adviser

+359 888 258 530 office@advisionit.com

PDF Documents

SELF-ASSESSMENT

Control questions that shape NIS2 readiness

Select each statement your organisation can support with current evidence. No information is stored or submitted!

How to use this assessment

Only mark a control when it is implemented, assigned to an owner, and supported by retrievable evidence.

Practical Tool

NIS2 Compliance Checklist

Mark the requirements your organisation has fulfilled. This checklist covers the minimum 10 risk-management measures under Article 21 and essential obligations under Articles 20 and 23.

Readiness Progress Tracker 0 of 18 completed

Tick the boxes below – checked items turn green. (Live counter needs JavaScript, which is disabled on this platform.)

Risk management measures approved by the management body

Governance

Regular cybersecurity training for management and staff

Governance

Policies on risk analysis and information system security

Risk (Art. 21)

Incident handling procedures

Risk (Art. 21)

Business continuity plan, backups, and disaster recovery

Risk (Art. 21)

Security measures in system acquisition, development, and maintenance

Risk (Art. 21)

Policies to assess the effectiveness of cybersecurity risk-management measures

Risk (Art. 21)

Basic cyber hygiene practices and cybersecurity training

Risk (Art. 21)

Policies on cryptography and encryption

Risk (Art. 21)

Human resources security, access control, and asset management

Risk (Art. 21)

Multi-factor authentication (MFA) and secured communications

Risk (Art. 21)

Early warning for significant incidents (within 24 hours)

Incidents

Incident notification with impact assessment (within 72 hours)

Incidents

Final incident report (within 1 month)

Incidents

Registry of ICT suppliers and contractual security clauses

Suppliers

Due diligence of critical supply chain providers

Suppliers

Registration with competent authority (self-identification)

Oversight

Up-to-date points of contact and CSIRT communication data

Oversight

Requirements: 0 of 18 completed Request full audit →

A useful first pass – not a certification

This checklist highlights likely priorities. Formal scope and conformity depend on your jurisdiction, sector, size, services, and risk profile.

NEED AN EVIDENCE REVIEW?

Turn your answers into an action plan.

Review with an auditor →

Advanced Vision IT Ltd is committed to providing superior solutions and services by utilizing an implemented and certified management system in accordance with ISO 9001: 2015, ISO / IEC 27001: 2013, ISO / IEC 20000-1:2018
Quality and Information Security Policy of Advanced Vision IT LTD

Terms and Conditions