If you get stuck with NIS 2
Level 1
A scope check, every measure required by Article 21 as a single step you can work through, evidence upload, PDF export, an audit trail, and the management course with a certificate of attendance that Article 20 asks you to be able to show.
If you would rather run the platform yourself, the source is on GitHub under AGPL-3.0. Also free. No licence fee, no user limit.
No time limit, no credit card, nobody from sales calling you.
NIS 2 is transposed by each member state, so the wording you are audited against is your national law, not the directive. The platform maps to the directive first and shows the national reference where one exists, for example §30 BSIG in Germany.
Level 2
Short technical questions get answered by email, usually within two working days, at no charge.
120 EUR net per hourbilled in half hours
When it turns into real work, our time costs 120 EUR net per hour, billed in half hours. One rate for everything that comes from us: interpreting a specific requirement for a company your size, self-classification, the measures plan, evidence that survives an inspection, a session with your management on their own duties under Article 20, or help getting the platform running on your own infrastructure.
You approve the number of hours before we start, and you get an itemised account of where they went. No minimum term, no subscription, no notice period.
Level 3
Some of it is not our work, and we would rather say so before you pay us than after. Penetration testing and technical audits, ISO 27001 certification, a standing external security officer, legal advice, incident response, OT and control systems, hands-on implementation on your infrastructure.
For that we keep a list of firms we work with. How it goes:
- Send us one line about where you are stuck. Or click “Find a specialist” inside the platform.
- We name one to three firms and write down why those ones. Field, region, free capacity.
- You decide whether to approach any of them. Nothing about you is passed on until you explicitly say so.
- The contract is between you and the firm. We are not in the middle of it and we invoice nothing.
The referral costs you nothing. No markup, no finder's fee, no obligation.
Level 2 is our own hours. On level 3 the firm pays us 15 percent of its net fee if the referral turns into an engagement.
Our partners commit in writing not to raise their fee because of it. We do not recommend by commission, and the order of our list does not depend on it.
If you would rather use your own consultant, that is completely fine, and you keep the platform either way.
- No legal advice. For that you need a law firm.
- No promise that an authority will accept your implementation. Nobody can honestly give you that.
- No recommendation we would not also make without a commission.
contact@nisd2.eu. One line is enough: where you are stuck, how many employees, which sector, which country.
Write to us