Regulatory Toolkit

NIS2 Directive Compliance Package — Essential / Important Entity Controls

Article 21 cybersecurity-risk-management measures, incident-reporting procedures, supply-chain due-diligence and management-body accountability documentation.

Who this is for

EU entities classified Essential or Important under NIS2 — energy, transport, banking, health, water, digital infrastructure, public administration.

What's included

  • Essential vs Important entity classification worksheet
  • Article 21 cybersecurity risk-management measures policy set (10 controls)
  • 24-hour early warning + 72-hour notification + final-report incident templates
  • Supply-chain due-diligence procedure
  • Management-body accountability register
  • Multi-factor authentication and crypto policy templates
  • Business-continuity, backup and crisis-management plans
  • Vulnerability disclosure procedure

Deliverable

Full NIS2 control set in editable Word + Excel, incident-notification timeline templates, gap analysis.

Estimated delivery time

5-7 business days · indicative turnaround for SME-tier orders. Enterprise / multi-site engagements scheduled separately.

Frequently asked questions

Who is the listed price for?
The price of $2,000 USD shown above is for SMEs and startups. For larger corporates, enterprise licensing or multi-site programmes, contact us for a tailored quote.
Are the documents editable and brandable?
Yes. Everything is delivered as fully editable Microsoft Word and Excel files you can customise and brand for your organisation.
Do you also offer implementation support?
Yes — pair this toolkit with our retainer services (CISO-aaS, DPO-aaS, Compliance Officer-aaS, Annual Surveillance) for ongoing support.
Is there a money-back guarantee?
Yes — 30 days, no questions asked.