Preview sample output for NIS2, ISO 27001 and AI Governance

See what we assess.
And what you receive.

A useful assessment makes more than the conclusion visible. It shows the scope, criteria and evidence behind it. Preview how Governancy turns evidence into findings, priorities and practical next actions.

Public preview

Three starting points.
Three explicit assessment frames.

Each report makes clear what was assessed, against which criteria, which evidence was used and what the logical next actions are.

NIS2

Fictional

NIS2 Gap Analysis

Brings applicability, missing measures and management priorities together in one actionable view.

Assessment frameNIS2 requirements within the agreed organisational scope
Management summaryNIS2 Gap Analysis
ScopeDefinedEvidenceTraceableFindingsBy requirementPriorityAction route

Preview shows: criteria, evidence status, findings, management conclusion and prioritised next actions.

Request the full sample report →

ISO/IEC 27001

Fictional

ISO 27001 Gap Analysis

Shows where the ISMS stands against ISO/IEC 27001, which evidence is missing and what should happen first.

Assessment frameISO/IEC 27001:2022, agreed scope and relevant ISMS evidence
Management summaryISO 27001 Gap Analysis
CriteriaStandard-ledEvidenceTraceableGapsLinkedReadinessConclusion

Preview shows: scope and criteria, assessed evidence, traceable gaps, limitations and the improvement route.

Request the full sample report →

AI Governance

Fictional

AI Governance Assessment

Maps AI use, ownership, risk and the governance still needed to make control demonstrable.

Assessment frameAgreed governance criteria, with EU AI Act and ISO 42001 context where relevant
Management summaryAI Governance Assessment
ScopeAI useEvidenceRoles & policyRisksPrioritisedGovernanceRoute

Preview shows: assessment frame, evidence base, governance gaps, risks, assumptions and concrete next actions.

Request the full sample report →
Assessment discipline

A conclusion should
be traceable.

Even when a starting assessment is not a formal audit, the reporting should follow the same professional discipline: define the scope, record evidence and connect conclusions to the agreed criteria.

Scope & criteria

Clear in advance what is and is not assessed, and against which frame.

Objective evidence base

Documents, interviews and samples are captured in a traceable way.

Traceable findings

A gap or risk is connected to criteria, evidence and context.

Conclusion & limitations

Priorities and next actions include relevant assumptions and limitations.

Important: the NIS2 and ISO 27001 Gap Analysiss and AI Governance Assessment are diagnostic starting points. They are not certification audits and do not provide a certification decision.

Fully fictional sample

See the depth of the output before you decide.

Select the report that matches the starting point you are considering. The sample shows not only the conclusion, but also how scope, criteria and evidence lead to that conclusion.

Management summaryThe essentials for decision-making, including conclusion and key limitations.
Traceable findingsNot only what is missing, but what the finding is based on and what deserves attention first.
Practical next routeFrom diagnosis to prioritised actions, ownership and concrete next steps.
Prefer to discuss your situation directly? Request a free 20-minute scope check →

Request a full sample report