NIS2 readiness, step by step
From assessing requirements and planning improvements to audit preparation: clear, tailored support for your organization.
The EU NIS2 Directive sets out cybersecurity requirementswhich have been implemented through Hungarian national cybersecurity legislation . Whether the requirements apply depends on an organisation's activities, size, sector and specific legal status .
Who is affected by NIS2?
Certain organisations in essential or important sectors may be in scope:
Small and medium-sized enterprises, depending on factors such as whether they:
- provide certain digital infrastructure or ICT services,
- carry out activities expressly covered by cybersecurity legislation,
- operate in essential or important sectors,
- provide services within regulated infrastructure sectors.
Municipalities and public institutions:
- may have separate obligations under Hungarian cybersecurity law, for example in relation to electronic administration systems,
- operate digital public-service systems (such as public service portals and databases),
- manage local infrastructure(such as water, waste and transport systems),
- process personal or sensitive records(including resident, social and educational records).
Unsure whether your company or institution is in scope? We can help you find out.
What does NIS2 require?
The framework covers not only technical safeguards but also organisational governance and management accountability.
Key requirements include:
- Reporting significant incidents within the legally prescribed deadlines to the competent authorities.
- Information security policies, access management, backups and updates.
- Incident response plans and operational procedures.
- Training and awareness for relevant personnel.
- Management accountability – leadership has responsibilities for cybersecurity risk management.
NIS2 readiness, step by step
1. Gap assessment
We review your current IT and information security posture.
2. Action plan
We propose practical priorities and a realistic timetable.
3. Policies and documentation
- Information security policy
- Incident response procedure
- Risk assessment report
- Training plan and attendance records
4. Employee training
Interactive sessions tailored to your team's roles and responsibilities.
5. Preparation for regulatory reviews
Specific audit obligations depend on the organisation; what matters is demonstrating the required compliance. We help you prepare the necessary evidence.
Why choose us?
Practical support – not just paperwork
Experience with smaller organisations and public institutions
Clear explanations without unnecessary jargon
Flexible cooperation tailored to existing systems
Fast, transparent proposals