{"id":2901,"date":"2025-05-09T15:28:15","date_gmt":"2025-05-09T12:28:15","guid":{"rendered":"https:\/\/netgroup.com\/special\/?page_id=2901"},"modified":"2026-02-16T13:46:07","modified_gmt":"2026-02-16T11:46:07","slug":"nis2-self-assessment","status":"publish","type":"page","link":"https:\/\/netgroup.com\/special\/nis2-self-assessment\/","title":{"rendered":"NIS2 Self Assessment"},"content":{"rendered":"
\n
\n
\n\n\n\n\n\n<\/div>\n\n
\n
<\/span><\/div>\n\n

Does NIS2 apply to you?<\/h1>\n<\/div><\/div>\n\n

The new EU directive affects more companies than you\u2019d expect<\/h4>\n<\/div><\/div>\n\n

If you're unsure what it means for your business, we\u2019ll help you understand it clearly. Take a quick self-assessment to see if your company falls under the regulation and what steps you should consider next.<\/p>\n<\/div><\/div>\n\n

Take NIS2 compliance test<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n\n
\n
\n
\n\n\n\n\n\n\n

NIS2 (Network and Information Security 2) is the EU\u2019s updated cybersecurity directive, adopted in January 2023. It sets out rules for how companies in critical sectors must handle cyber risks. If your company is in scope, you will need to meet strict requirements for risk management, incident reporting, and supplier oversight.<\/p>\n

EU member states were required to transpose the directive into national law by October 17, 2024. This means companies must have already taken action to comply with these requirements. But it\u2019s not just about compliance. NIS2 is a push to raise the bar across industries. If your operations rely on IT or you\u2019re part of a wider supply chain, the directive could apply to you even if you're not in a typical \"critical\" sector.<\/p>\n<\/div><\/div>\n<\/div>\n\n

<\/span><\/span>\n
<\/span><\/div>\n<\/div>\n<\/div>\n\n
\n
\n\n\n\n\n\n\n

If your company is subject to NIS2, there are clear actions you must take to comply with the directive. These steps are designed to improve your cybersecurity posture, protect your operations, and ensure you meet legal requirements. Below are the key actions your company should focus on.<\/p>\n<\/div><\/div>\n<\/div>\n<\/div>\n\n

\n
\n

1.<\/h4>\n<\/div><\/div>\n\n

Implement cybersecurity risk management policies<\/strong> (e.g. incident response, business continuity, access controls)<\/p>\n<\/div><\/div>\n<\/div>\n\n

\n

2.<\/h4>\n<\/div><\/div>\n\n

Deploy security monitoring and detection systems<\/strong> (SIEM, endpoint protection, intrusion detection, etc.)<\/p>\n<\/div><\/div>\n<\/div>\n\n

\n

3.<\/h4>\n<\/div><\/div>\n\n

Conduct regular employee training on cybersecurity<\/strong><\/p>\n<\/div><\/div>\n<\/div>\n<\/div>\n\n

\n
\n

4.<\/h4>\n<\/div><\/div>\n\n

Ensure your suppliers and third-party vendors<\/strong> are also compliant<\/p>\n<\/div><\/div>\n<\/div>\n\n

\n

5.<\/h4>\n<\/div><\/div>\n\n

Report significant cyber incidents<\/strong><\/p>\n