We are expanding our NIS2 consultancy, offering nine new modular service packages specifically designed for small and medium-sized enterprises. The offer helps businesses assess their current NIS2 maturity level, identify areas for action and implement the necessary measures in a structured way.
With the new service packages, we are addressing a challenge currently faced by many small and medium-sized enterprises: while the requirements of NIS2 are well known, there is often still no clear overview of which requirements have already been met, where gaps remain and which tasks should be tackled first.
From NIS2 assessment to a concrete action plan
The starting point for the new offering is a tool-supported NIS2 assessment. This provides a structured evaluation of the company's current maturity level, covering areas including risk management, supply chain, incident management, awareness and governance. Based on the results, existing risks and vulnerabilities are identified and the next steps are prioritised according to risk and feasibility. Companies receive a results report including a risk matrix and a concrete action plan. For SMEs in particular, it is important not to establish new structures across the board, but first to determine what is already in place and where action is actually required. A structured assessment helps businesses evaluate existing security measures and implement NIS2 requirements despite limited resources.
Nine new service packages for different areas of action
The new SITS service packages cover three key areas of NIS2 implementation and can be combined according to individual requirements.
Governance & Compliance
- Risk Management
- Supply Chain Management
- Audit Programme
- Personnel and Site Protection
Security & Awareness
- Awareness Training
- Cyber Hygiene and technical minimum standards
Resilience & Operations
- Incident Management
- Business Continuity Management and Emergency Management
- Cryptography and protection of sensitive information
This means companies do not have to approach NIS2 as one large, rigid compliance project. Instead, they can prioritise the areas where the assessment identifies the greatest need for action.
Modular rather than one-size-fits-all
The service packages are designed to give companies the flexibility to decide how much support they need. Options range from individual implementation projects and consulting packages to longer-term support, including external Information Security Officer (eISB) or external CISO (eCISO) services.
The focus is on tangible results for implementation, including practical templates, policies and roadmaps as well as audit-ready documentation. This creates a scalable approach tailored to the company's maturity level and available resources.
A structured approach to NIS2 implementation
With the nine new service packages, we are expanding our NIS2 offering with an approach specifically tailored to the needs of SMEs. From the initial assessment and prioritisation through to the implementation of individual measures, businesses receive exactly the support they need for their individual NIS2 journey.
Assess your NIS2 maturity level and identify the right service packages for your individual implementation needs.
