Cyber Assessments

NIS2 Pre-Assessment

Quick self-check for SMBs. All three sections submit together. No sensitive data collected.

Please fix the highlighted fields.

Date

First Name

Last Name

NIS2 Section 1 – Applicability

Does your organization operate in any of the sectors covered by NIS2? Do you have 50 or more employees? Is your annual turnover or balance sheet over €10 million? Do you provide core digital or ICT services (e.g., cloud, data centre, trust, or DNS)? Are you a public administration entity (central or regional)?

NIS2 Section 2 – Governance (Article 20 & 23)

Board assigned responsibility for cybersecurity? Board members receive cybersecurity training? Cyber risk in strategic decision-making? Appointed responsible person(s) for compliance? Incident detection, response & reporting capabilities? Post-incident reviews conducted? Escalation & communication procedures?

NIS2 Section 3 – Cybersecurity Risk Management (Article 21)

Have Risk analysis & security policies? Incident response capabilities? Business continuity plans? Crisis management procedures? Third-party risk assessments? Supply chain security controls? Network & information systems security? Security in system acquisition & maintenance? Vulnerability handling & disclosure? Testing & auditing of security measures?

The data collected from the survey will be used to compile the first-pass NIS2 maturity assessment. Once complete, all survey data will be permanently deleted.

Thanks for your participation and support!