Consulting

Are you unsure about where you stand with NIS2?

Many organizations are unsure whether they are subject to NIS2, how far they are from meeting the requirements, and which measures should be prioritized first.
We help you gain a clear overview of your current situation and translate the legal requirements into concrete recommendations and a realistic plan.

Consultation with a specialist

One of our experienced specialists will review your challenges, answer your questions, and provide specific recommendations based on your organization, risks, and business. If you need further assistance, we can support you throughout the entire process—from the initial discussions to the subsequent implementation, depending on your needs.

Preliminary Analysis / GAP Analysis

Maturity Assessment

Getting Started

We’ll start by getting to know your organization and assessing your current level of security in relation to NIS2.

Scope

Review

We identify which NIS2 requirements apply to you and review your organization, critical systems, and key processes.

Risk Assessment

Mapping

We identify the most significant shortcomings and risks and compile the results into a concise report with clear priorities.

Action Plan

Clarification

You will receive a concrete action plan with recommendations, priority actions, and next steps toward NIS2 compliance.

Læs mere om NIS2 kravene her

Start with a no-obligation consultation with one of our experts, or purchase a preliminary analysis starting at 15,000 DKK

Foranalyse fra 15.000 DKK. KontaktStadig i tvivl? Se, hvad en foranalyse indeholder
Why Conduct a Preliminary Analysis?

Get the big picture before you invest

A NIS2 preliminary analysis will give you a clear picture of where you stand today, which requirements apply to you, and which initiatives should be prioritized first. The result is a solid basis for decision-making that makes it easier to plan investments and work in a structured manner toward NIS2 compliance.

Get a quote for a full NIS2 review

Includes, among other things,

WorkshopAnalysisReportReviewAction PlanConsultingAnnual Cycle
Book a free consultation

The conversation is non-binding

First Step Toward NIS2 Compliance

Send us an email to schedule a free 15-minute review of your NIS2 requirements with one of our cybersecurity experts. 

By submitting your email address, you agree to our privacy policy and consent to being contacted by nesp.ONE.

View upcoming courses and webinars

Learn how your company can strengthen cybersecurity and achieve compliance with standards such as ISO 27001, NIS2, and CRA.

NIS2 for management 

Copenhagen / August 26, 26

View all coursesRead more

ISO 27001: Certificate Course

Copenhagen / September 2–3, 2026

Read more

NIS 2 in Practice

Odense / September 10–11, 2026

Read more

ISO 27001: Certificate Course

Copenhagen / Oct. 7–8, 2025

Read more

Preliminary Analysis – NIS2

Formålet med en foranalyse er at vurdere organisationens nuværende praksis i forhold til kravene i NIS2-loven. Analysen giver et samlet overblik over organisationens modenhed inden for informationssikkerhed og identificerer de områder, hvor sikkerhedsforanstaltninger, processer eller dokumentation skal styrkes for at understøtte overholdelse af loven. Foranalysen tager udgangspunkt i følgende ti områder, som NIS2-loven stiller krav om, at omfattede organisationer arbejder med:

1. Policies for Risk Analysis and Information System Security

Der foretages en vurdering af, om organisationen har etableret politikker og processer for risikoanalyse og informationssystemsikkerhed. Dette omfatter blandt andet identifikation af kritiske aktiver, risikovurderinger, ledelsens involvering samt implementering af passende organisatoriske og tekniske sikkerhedsforanstaltninger.

2. Incident Management

Der foretages en vurdering af organisationens processer for håndtering af cybersikkerhedshændelser. Analysen omfatter blandt andet organisationens evne til at identificere, registrere, analysere, håndtere og rapportere sikkerhedshændelser samt sikre, at erfaringer fra hændelser anvendes til løbende forbedringer.

3. Business continuity, including backup management, disaster recovery, and crisis management

Der vurderes, om organisationen har etableret beredskabs- og kontinuitetsplaner, som understøtter opretholdelse af kritiske forretningsfunktioner under sikkerhedshændelser. Analysen omfatter blandt andet backupstrategier, disaster recovery, krisestyring, beredskabsøvelser og planer for genetablering af driften.

4. Supply chain security, including security-related aspects concerning the relationships between an individual entity and its direct suppliers or service providers

Der foretages en vurdering af organisationens processer for styring af cybersikkerhedsrisici i forsyningskæden. Det omfatter blandt andet risikovurdering af leverandører, kontraktuelle sikkerhedskrav, løbende leverandøropfølgning samt dokumentation af leverandørernes sikkerhedsniveau.

5. Security in connection with the acquisition, development, and maintenance of network and information systems, including the handling and disclosure of vulnerabilities

Der vurderes, om organisationen har etableret processer, der sikrer, at cybersikkerhed indgår ved anskaffelse, udvikling og vedligeholdelse af net- og informationssystemer. Analysen omfatter blandt andet ændringsstyring, patch management, sårbarhedshåndtering, sikker udvikling samt processer for håndtering og offentliggørelse af sårbarheder.

6. Policies and procedures for assessing the effectiveness of measures to manage cybersecurity risks

Der foretages en vurdering af, hvordan organisationen løbende evaluerer effektiviteten af sine cybersikkerhedsforanstaltninger. Dette kan blandt andet omfatte interne kontroller, sikkerhedsscanninger, penetrationstest, audits, ledelsesrapportering og opfølgning på identificerede forbedringsområder.

7. Basic Cybersecurity Hygiene Practices and Cybersecurity Training

Der vurderes, om organisationen har etableret processer, der understøtter en høj grad af cyberhygiejne blandt medarbejdere og ledelse. Analysen omfatter blandt andet awareness-programmer, phishing-træning, sikker anvendelse af IT, password-politikker samt løbende uddannelse i cybersikkerhed.

8. Policies and procedures regarding the use of cryptography and, where applicable, encryption

Der foretages en vurdering af organisationens anvendelse af kryptografi og kryptering til beskyttelse af informationer. Det omfatter blandt andet kryptering af data under lagring og transmission, styring af kryptografiske nøgler samt retningslinjer for anvendelse af kryptografiske løsninger.

9. Personnel Security, Access Control Policies, and Asset Management

Der vurderes, om organisationen har etableret passende procedurer for personalesikkerhed, adgangskontrol og forvaltning af informationsaktiver. Det omfatter blandt andet onboarding og offboarding, rollebaseret adgangsstyring, periodisk gennemgang af brugerrettigheder, klassificering af aktiver samt beskyttelse af virksomhedens informationsaktiver gennem hele deres livscyklus.

10. Use of solutions involving multi-factor authentication or continuous authentication, secure voice, video, and text communications, and secure emergency communication systems within the unit, where applicable

Der foretages en vurdering af organisationens anvendelse af stærke autentificeringsmekanismer, herunder multifaktorautentificering (MFA) eller kontinuerlig autentificering, hvor det er relevant. Derudover vurderes anvendelsen af sikre kommunikationsløsninger til tale-, video- og tekstkommunikation samt etablering af sikre interne nødkommunikationssystemer.

NIS2 Preliminary Analysis Report

På baggrund af foranalysen modtager organisationen en rapport med en samlet vurdering af dens nuværende modenhed inden for cybersikkerhed og informationssikkerhed.
Rapporten identificerer forskellen mellem virksomhedens eksisterende praksis og de relevante krav i NIS2-loven. Den indeholder en prioriteret handlingsplan med anbefalinger til organisatoriske og tekniske sikkerhedsforanstaltninger, dokumentation og ansvarsfordeling. Organisationen får dermed et klart beslutningsgrundlag for det videre arbejde med NIS2-compliance og styrkelse af sin modstandsdygtighed.
Preliminary analysis starting at 15,000 DKK. Contact us

Strengthen your cybersecurity with the right guidance on NIS2

 Enter your email address here, and we'll contact you personally with the best possible solution for your business—we look forward to hearing from you.

Preliminary analysis starting at 15,000 DKK – price subject to the size of the company.

By submitting your email address, you agree to our privacy policy and consent to being contacted by nesp.ONE.