.svg)
English
You don't need new software: we build the ISMS in your existing tools. External audits or penetration tests, if your supervisory authority requires them, are billed directly by the provider.
Less than 2 months from kick-off to robust evidence. We name the date before we start, and so far we have kept it with every client.
One contact person on your side for coordination and approvals, usually a few hours per week. We build the documentation, workflows and evidence.
No. NIS-2 does not require a certificate but demonstrably effective measures. An ISMS according to ISO 27001 is the best foundation for that; certification remains optional and can be added later.
Risk management measures under Section 30 BSIG, reporting duties within 24 hours, 72 hours and one month, registration with the BSI, and a management board that is accountable for the measures and trained. What the directive requires in detail is on our NIS-2 page.
.svg){kind=icon}
