You are accountable for security. We make it demonstrable.

The IT service provider typically owns operations and technology. NIS-2, however, obliges management to handle governance, risk assessment, supplier management and documented reporting paths. These duties cannot be delegated away. That governance role runs on the platform, and you add the vCISO when you need one, without you having to become CISO yourself.

That is the core question of the free 30-minute risk check. We assess sector (Annexes 1 and 2 of the German BSI Act), headcount, revenue and balance sheet total and classify you indicatively. The legally binding evaluation, however, remains a matter for a law firm with an IT-security-law focus. We provide the expert basis for that legal conversation.

Maturity heatmap by site and standard, top-10 risks with mitigation status, measure tracking by owner and due date, compliance status for NIS-2, DORA, ISO 27001 and sector-specific requirements, 12-month trend charts. Format: PDF templates for supervisory-board meetings and interactive dashboard for ongoing oversight.

With the vCISO bundle you have a senior CISO on mandate in week one. With the 30-minute risk check you have an initial gap assessment immediately. Audit-ready NIS-2 readiness typically lands in 8 to 12 weeks, depending on size and number of sites.

The risk check is free. The vCISO bundle starts at 3,600 euros per month. The NIS-2 gap assessment runs at 4,500 euros fixed price, implementation from 18,000 euros. Corporate pricing for multi-site rollouts is project-based.