Who this service is for
For organisations considering or operating under NIS2-related national requirements, including groups with activities across multiple EU jurisdictions.
NIS2 readiness
Translate applicable cyber security obligations into accountable governance, workable controls and tested incident procedures.
Common challenges companies face
- Group-wide assumptions overlook differences in national implementation and supervisory expectations.
- Management accountability is unclear and control owners cannot show sustained implementation.
- Supply-chain risk reviews focus on questionnaires without resolving material dependencies.
- Incident workflows do not join technical detection with legal assessment and reporting decisions.
Technical scope
- Agree applicable jurisdictions, entity scope and legal interpretation with compliance and legal advisers.
- Review risk management, management oversight, supplier security and incident handling.
- Examine vulnerability processes, identity protection, cryptography, continuity and recovery arrangements.
- Trace policy commitments to operating evidence and test escalation through practical scenarios.
How Poleis supports you
- Establish an applicability decision record with legal input and map services and dependencies.
- Review governance and technical controls through interviews, evidence and selected samples.
- Prioritise remediation and rehearse incident decision-making across responsible teams.
What you receive
- Readiness report mapped to the confirmed applicable national requirements.
- Control and evidence gap register with owners and review milestones.
- Incident escalation recommendations and management action plan.
Engagement scope
NIS2 is an EU directive implemented through national law. Applicability and reporting requirements require jurisdiction-specific review rather than a single generic checklist.
Discuss Your Requirements
Tell us about your organisation, the assessment or improvement you need, and your timescale. We will agree a proportionate scope and practical next steps.