REGCYTECH
About

NIS2 Compliance

Directive readiness and audit-side documentation.

ESG / VSME Supplier Pack

Supplier ESG / VSME disclosure packs.

AI Governance & Documentation

EU AI Act governance artefacts.

All service lines→
InsightsNewsContact
Language
HUEN
Book a call
Language
HUEN
MENU
About
NIS2 ComplianceESG / VSME Supplier PackAI Governance & Documentation
InsightsNewsContact
Book a call

REGCYTECH

Regulatory compliance advisory for serious organisations.

hello@regcytech.com

Services

  • NIS2 Compliance
  • ESG / VSME Supplier Pack
  • AI Governance & Documentation

Company

  • About
  • Insights
  • News
  • Markets
  • Contact

Legal

  • Legal Notice
  • Privacy
  • Terms

© 2026 Regcytech Kft.. All rights reserved.

Budapest, Hungary

RESILIENCE

Back
01

DIRECTIVE: 2022/2555/EU — NIS2 READINESS

Service

Gap analysis. Policy alignment. Documented readiness. In that order.

A structured assessment of your organisation's position against NIS2 requirements — followed by the documentation, policy alignment, and implementation roadmap needed to respond with confidence.

Request a NIS2 scope review
02
STATUS: ENFORCEMENT ACTIVE

NIS2 has been in force across EU member states since October 2024. Supervisory frameworks are operational. Organisations that have not assessed their obligations are already operating with measurable regulatory exposure.

TRUST

03

SCOPE

Essential and important entities under NIS2 Annex I and II. Sector-specific applicability reviewed at assessment start.

METHODOLOGY

Article-by-article gap assessment. Mapped to your current controls and governance structure.

OUTPUT

Documented gap list, prioritised roadmap, and management-ready executive summary.

INCLUDED

04

SCOPE: INCLUDED

What the engagement covers

  • 01
    Gap assessment against NIS2 obligations (article-by-article review)
  • 02
    Entity classification review (essential vs. important, Annex I / II)
  • 03
    Existing documentation inventory — what exists, what is missing
  • 04
    Policy and procedure gap analysis
  • 05
    Evidence mapping — current controls to NIS2 requirements
  • 06
    Prioritised remediation roadmap
  • 07
    Executive summary (management-ready, non-technical language)

LIMITS

05

SCOPE: NOT INCLUDED

What is out of scope

  • —Ongoing compliance monitoring (available as a separate retainer engagement).
  • —Technical penetration testing or vulnerability scanning.
  • —Legal representation or regulatory authority filing.
  • —Implementation of technical controls (this engagement is advisory).
  • —DORA or AI Act compliance (separate service scope).

OUTCOMES

06

OUTCOMES

What you have when the engagement closes

  • 01
    A documented gap list mapped to NIS2 article requirements — precise enough to inform board-level decisions.
  • 02
    An evidence inventory that reveals exactly what your organisation already has and what must be produced.
  • 03
    A prioritised roadmap that sequences remediation by risk level, not by effort.
  • 04
    An executive summary your leadership can present to auditors, insurers, or regulators without translation.

METHOD

07

METHODOLOGY

How the engagement is delivered

1

Scope

Determine entity classification under NIS2 Annex I / II. Define applicable obligations and supervisory context.

2

Assess

Article-by-article gap analysis against current controls, documentation, and governance arrangements.

3

Map

Evidence inventory and documentation gap list. Existing controls mapped to NIS2 requirements.

4

Roadmap

Prioritised remediation roadmap. Sequenced by risk exposure, not effort.

5

Deliver

Full documentation pack and executive summary. Handover structured for internal use and external presentation.

INSIGHTS

08

RELATED INTELLIGENCE

Related insights

Insights

NIS2 Compliance: What Preparation Really Means in Practice

Open article →

09
Service

Begin with a gap assessment.

A short scoping conversation establishes whether your organisation falls within NIS2 scope and what an assessment would involve.

Request a NIS2 scope review