Security & Compliance Readiness
NIS2 and DORA readiness
A gap assessment and a technical plan against NIS2, DORA and the EU AI Act. The obligations stay yours, the controls are ours to build.
DEFINITION
Definition
NIS2 and DORA readiness maps applicable operational resilience duties to current technical controls, evidence sources, accountable owners and a sequenced remediation plan.
THIS IS FOR YOU IF
- You can provide current policies and controls.
- A named owner can supply a named risk decision maker.
- Your team needs a gap assessment, control map and technical remediation plan.
HONEST FIT
Not for you if
you need legal advice or a guarantee that a regulator will accept your controls.
WHAT WE BUILD
The work inside the scope
Inputs from you: Current policies and controls, Critical service inventory, A named risk decision maker and Supplier and incident documentation. Work items: Applicability working session, Control gap assessment, Supplier dependency review, Incident process review and Remediation roadmap. Together they produce a gap assessment, control map and technical remediation plan.
01
Applicability working session
02
Control gap assessment
03
Supplier dependency review
04
Incident process review
05
Remediation roadmap
PRODUCES
A gap assessment, control map and technical remediation plan
HOW IT GOES
A four to seven weeks working range
- 01
Set the boundary
Confirm the scope, the owner and the decisions that sit inside four to seven weeks.
- 02
Inspect the inputs
Your team supplies current policies and controls, critical service inventory, a named risk decision maker, supplier and incident documentation.
- 03
Build the work
We complete the agreed items and keep exceptions with a named owner.
- 04
Hand over the artefact
You receive a gap assessment, control map and technical remediation plan.
WHAT YOU GET
An artefact your team holds
A gap assessment, control map and technical remediation plan
FAQ
Questions about NIS2 and DORA readiness
NIS2 and DORA readiness covers applicability working session, control gap assessment, supplier dependency review, incident process review, remediation roadmap.