NIS2 diagnosis | iCompliance.eu
Rapid diagnosis • 5 working days • Portugal

NIS2 Diagnosis: find out in 5 working days whether your organisation is covered and what you need to do

Applicability assessment + gap assessment and a practical roadmap (30-60-90 days + 6–12 months) with audit-ready evidence.

  • Confirmed applicability (essential/important/supply chain)
  • Gap assessment by NIS2 domains (risks + priorities)
  • 6–12 month roadmap with templates and evidence
Response within 24 working hours. No obligation.
Aligned with best practices (ENISA)Compliant with ISO/IEC 27001

This diagnosis is for you if...

You need to confirm obligations, reduce risk quickly, and prepare evidence (internal and for customers/suppliers).

Opinion on applicability

Objective confirmation of the framework and scope.

Gap assessment

Gaps by NIS2 domain and priorities by risk.

30-60-90 day plan

Quick wins and critical actions with owners and deadlines.

Roadmap 6–12 months

Realistic sequence of implementation and evidence.

Evidence pack

Templates for policies, incidents, KPIs, and third parties.

How it works (5 working days)

A simple, guided, deliverable-oriented process — without document overload.

1

Initial call

  • Critical services and dependencies
  • Suppliers and cloud
  • Objectives and deadlines
2

Guided collection

  • Questionnaire + minimum evidence
  • Scope mapping
3

Gap analysis

  • Risk and impact on the business
  • Priorities and quick wins
4

Delivery and plan

  • Report + 30-60-90 days
  • Roadmap 6–12 months + templates

In the end, you know exactly...

  • Whether it is covered and why (including supply chain)
  • What to fix first to reduce risk and meet deadlines
  • How to prepare incident response and evidence
  • How to align IT + compliance in an executable implementation

Checklist NIS2 (PDF)

Still evaluating?

Download the checklist with essential controls and evidence.


Download checklist

What we need to get started

  • IT/security and compliance contact points
  • List of critical services/systems (high level)
  • Key suppliers (cloud, MSP, ERP, etc.)
  • Existing policies and procedures (if any)

FAQ

• How long does it take? Typically 5 working days after the call and minimum collection.

• Is this an audit? No — it is an actionable diagnosis with a roadmap and evidence.

• What if we are not covered? You will still receive useful recommendations and evidence.