NIS2 affects your company.
I tell you in 5 days what to do.
The NIS2 Implementation Act is in force. Personal director liability. Fines up to €10M or 2% of global turnover. Most companies do not know whether they are affected - and what to do.
NIS2 Implementation Act has been in force since 6 March 2026. All obligations are legally binding immediately.
If you answer yes to any of these - act now.
You don't know whether NIS2 applies to your company
No documented risk analysis in the last 12 months
Backups have never been tested in a real scenario
Nobody knows who decides during an incident and what happens
You can't prove that your security measures actually work
Your board members do not know their personal liability
A single one of these gaps can have legal consequences for the management during a BSI audit or an incident.
Free NIS2 Quick Check
No login. No data storage. All input stays in your browser. At the end you receive an individual report with prioritised recommendations.
NIS2 Compliance Audit - What you get
Clarity in 5 working days. Fixed price. No consulting marathon.
1. Clarification call
30 minutes, free. Confirmation: affected by NIS2? If not - no audit, no cost. Define scope.
You + Jan Richter · Day 0
2. Review
1 day remote. Assessment against NIS2 Art. 21(2)(a)–(j), GDPR, BSI IT-Grundschutz, NIS2-UmsG.
Jan Richter · Day 1–3
3. Result
Gap report, action plan, director-liability check, 1-hour debriefing with the management.
Jan Richter · Day 5
- ✅ Gap analysis: current status vs. NIS2 requirements and GDPR, sorted by severity
- ✅ Action plan: what first, what later, what optional - with effort estimates
- ✅ Director-liability check: personal risks of the management
- ✅ BSI audit readiness: can you withstand a BSI audit?
- ✅ Execution evidence: not "does a policy exist?" but "does it work?"
- ✅ Executive summary: decision-ready for the management
- ✅ 1-hour debriefing: joint walk-through of the results
Fixed prices. No surprises.
Choose what you need. Each tier builds on the previous one.
Free NIS2 Quick Check
Are you affected? Clarity in 5 minutes.
- ✅ Quick check against NIS2 Annex I & II
- ✅ Size-criteria check (employees, turnover)
- ✅ Initial assessment: Essential or Important Entity
- ✅ Result as download
NIS2 Compliance Audit
The foundation for all compliance decisions. In 5 working days.
- ✅ Deep-dive gap analysis: status quo vs. NIS2 Art. 21(2)(a)–(j)
- ✅ BSI IT-Grundschutz baseline check
- ✅ Director-liability check
- ✅ Prioritised action plan with effort estimates
- ✅ Executive summary for the management
- ✅ 1-hour debriefing
- ✅ Delivery in 5 working days
NIS2 Implementation Support
I accompany your team during the implementation of the action plan.
- ✅ 1–2 days/month remote
- ✅ Prioritisation and steering of the implementation
- ✅ NIS2 and GDPR measures in parallel
- ✅ Review of implemented measures
- ✅ Preparation for BSI audit
- ✅ On demand: training for board and CSIRT
- ✅ Cancel monthly - you stop when you are done
Full mandate (complete implementation by CZECURE): on request, from € 24,900
All analyses are a professional assessment and serve as a basis for your internal decisions. The final responsibility for NIS2 compliance lies with the client.
Why not just a normal IT consultant?
IT consultants manage technology. I test and prove your security vis-à-vis authorities and auditors.
Jan Richter
IT-Security Consultant & NIS2 Compliance Expert
Over 10 years in the strictly regulated pharmaceutical industry - in environments audited by sponsors (FDA, EMA). I know from experience: when IT fails, what counts is not the excuse, but the protocol. I bring this uncompromising perspective to your company.
I have implemented the strictest regulations in the world in practice. Now I bring this standard to your NIS2 compliance.
Frequently asked questions
How does your approach differ from ISO 27001?
ISO 27001 checks whether a policy exists. I check whether it works - with execution evidence, not just documentation review.
Do you run security operations for us?
No. I assess and validate your existing IT security and enable your team to implement. No permanent dependency.
How long does an audit take?
The clarification call takes 30 minutes. The review 1 day. We deliver the results in 5 working days.
Which industries do you work for?
All NIS2-affected sectors: energy, healthcare, transport, logistics, chemicals, food, digital infrastructure and IT service providers.
We need the audit report for B2B tenders - is that possible?
Yes. The gap report is documented in a decision-ready manner and is suitable for presentation to business partners and procurement teams. Many companies use the audit as proof of their security posture towards B2B customers.
Get in touch
Have questions about NIS2 compliance? I reply within 24 hours.