NIS2
NIS2 Gap Analysis
Bring applicability, board-level duties, controls, evidence and the most important gaps into one prioritised plan.
- scope and current situation
- gaps and risks
- management priorities
- roadmap and ownership
Gap analyses & assessmentsGap analyses and assessments.
Gap analyses and assessments.
Clarity before commitment.
Start with a defined assessment that replaces uncertainty with evidence, priorities and a practical next step.
20 minutes · no obligation · usually a reply within one business day
Starting prices including reporting: ISO 27001 Gap Analysis € 2,495 · NIS2 Gap Analysis € 1,995 · AI Governance Assessment € 1,995. All prices exclude VAT. Final price after a scope check.
Choose your starting point
Get the right diagnosis before a larger engagement.
ISO/IEC 27001
ISO 27001 Gap Analysis
Find out which parts of your ISMS already work and which gaps should be addressed first.
- standard-aligned gap assessment
- documentation and actual operation
- risk-based priorities
- implementation plan
AI Governance & ISO 42001
AI Governance Assessment
Identify where AI is used, who is accountable, what risks matter and which governance measures are needed first.
- AI inventory and ownership
- governance and risk baseline
- readiness for the AI Act and ISO 42001
- priorities and roadmap
Governancy decision guide
Which assessment is right for your question?
Use this matrix to identify the most suitable route. A short scoping discussion confirms the precise boundaries so you do not buy a broader engagement than necessary.
| Decision point | NIS2 Gap Analysis | ISO 27001 Gap Analysis | AI Governance Assessment |
|---|---|---|---|
| Primary trigger | Regulatory, board or supply-chain pressure | Certification, audit or customer requirements | AI adoption outpaces governance |
| Core question | Does NIS2 apply, and what should we address first? | What is working in our ISMS, and what cannot yet be demonstrated? | Which AI applications, owners and risks require attention first? |
| Initial evidence base | Scope, controls, incident response, suppliers and governance arrangements | ISMS documentation, implementation, records, interviews and sampling | AI inventory, roles, policies, suppliers, assessments and oversight |
| Outcome | Gaps and risks with management priorities | Standards-based gaps and a prioritised improvement plan | Governance and risk baseline with concrete next measures |
| Typical follow-up | Targeted implementation, board action or supply-chain improvements | Implementation, internal audit or deeper review | Governance design, ISO 42001 or focused impact assessment |
Not sure yet?
Request a free scope checkNot sure which assessment is the right fit?
Use a 20-minute scope check to clarify the decision you need to make and identify the most sensible first step. This gives you a clear starting direction.
Or request a sample report first →