Free · about 4 minutes
NIS2 Readiness Check
A fast, non-binding orientation across governance, identity, incident response, resilience and supply chain. The result is not legal advice or certification.
1 / 12 · Governance
Is a management-level role accountable for cyber risk management?
2 / 12 · Governance
Are cyber risks assessed regularly and management decisions documented?
3 / 12 · Identity
Is MFA technically enforced for privileged and relevant user groups?
4 / 12 · Identity
Are privileged roles and departed users reviewed regularly?
5 / 12 · Incident
Is there a tested incident-response process with clear reporting and escalation paths?
6 / 12 · Incident
Are central logs and security signals available for timely incident investigation?
7 / 12 · Resilience
Are backups protected against common ransomware scenarios and restores tested regularly?
8 / 12 · Resilience
Are business continuity and disaster recovery dependencies documented and tested?
9 / 12 · Suppliers
Are critical IT/cloud/SaaS suppliers assessed and governed based on risk?
10 / 12 · Suppliers
Do you maintain a current view of critical third parties and security dependencies?
11 / 12 · Controls
Are vulnerabilities, patches and technical security baselines managed measurably?
12 / 12 · Controls
Can you produce current evidence for key security controls rather than only policies?
Your orientation
0%
A score is not compliance evidence. What matters is which risk-relevant controls actually operate and what evidence exists.