NIS2 Readiness Assessment
Identify NIS2 gaps and prioritise the next steps.
Organizations facing ISO 27001, NIS2 and the EU Cyber Resilience Act (CRA) share one challenge: turning regulation into operational reality without drowning in bureaucracy.
I’m Axel Hoehnke, an independent CISO-level advisor and ISO 27001 and ISO 42001 Lead Auditor, with BSI expertise. I contribute to CRA standardization work with Cyberstand and in DIN, CEN and CENELEC committees. I know what regulators and auditors actually check, because I help write and apply the standards.
Assessment, implementation and ongoing support are categories, not service packages. Choose services individually; there is no required sequence.
Understand what matters for your organisation.
Identify NIS2 gaps and prioritise the next steps.
Determine whether the Cyber Resilience Act applies to your product and which obligations follow.
Align leadership on cyber risk, liability and investment priorities.
Turn requirements into practical measures.
Build and document security measures, incident reporting and supply-chain protection.
Prepare product security, vulnerability handling and technical evidence for CE marking.
Set response plans, reporting routes and team responsibilities, then practise them.
Assess supplier risks and define security requirements for contracts and reviews.
Manage security and maintain evidence over time.
Track NIS2 and CRA changes and identify what your organisation needs to do.
Lead information security, advise leadership and support regulatory reviews.
Prepare evidence, coordinate with auditors and manage corrective actions.
Prepare technical documentation and software bills of materials for CE marking.
Not sure which service fits? Talk it through with Axel.