NIS 2 compliance
Preparation and audit for NIS 2 compliance — from gap analysis to measures in place and documentation that holds up to scrutiny.
- 90 daysNIS 2 package — preparation and rollout
- < 4 hSLA response
- 24/7monitoring and support
Compliance that works in practice, not just on paper
The NIS 2 directive and the Bulgarian legislation that transposes it widen the range of organisations that must apply cybersecurity measures. Those measures need to be more than written policies — they have to be in place and provable.
We work in stages: a gap analysis against the requirements, policies and measures prioritised by risk, putting the protections and processes in place, and documentation that holds up in an audit. If you are not sure whether your organisation is in scope, that is where we start — together with your legal adviser when needed.
Why choose infoService
The same team that prepares the measures also puts them in place and maintains them — you get more than a report.
-
A clear plan from the start
After the gap analysis you know what is missing, in what order it is fixed and who owns each step.
-
Real protection
The measures are built into your systems and processes, not left in the policies.
-
Clear timelines
Every step has a deadline and an owner, and progress is visible at any moment.
-
Provable compliance
Documentation, records and controls you can show during an inspection or an audit.
-
One team all the way
From analysis and policies to implementation and support — no hand-offs between providers.
-
Kept up to date
We review the measures and documentation periodically, so they stay current as your environment changes.
From gap analysis to provable compliance
-
Gap analysis
We review your systems, processes and documentation, and you get a clear picture of the gaps and risks.
-
Policies & measures
Technical and organisational measures and policies, prioritised by risk, each with an owner.
-
Delivery
We put the protections, processes and incident response in place in practice.
-
Compliance
Documentation and controls that hold up in an audit, with periodic reviews afterwards.
Frequently asked questions
Cannot find an answer? Write to us — we reply within the business day.
How do we know whether NIS 2 applies to us?
Scope depends mainly on the sector you operate in and the size of your organisation. We help with the initial assessment, and where there is doubt we recommend having the final view confirmed by a lawyer.
How long does the preparation take?
The NIS 2 package takes 90 days — from the gap analysis to measures in place. What exactly goes into them depends on the size of the organisation and how many measures are already in place; after the analysis you get a staged plan.
How is the price formed?
It depends on the size of the organisation and the scope of the measures. The gap analysis is agreed separately, and after it you get a concrete proposal for the implementation.
Do you guarantee compliance?
Compliance is demonstrated by the organisation itself, so no one can honestly guarantee it in advance. What we do is put the measures in place in practice and prepare the documentation and controls that show it.
Ready for us to take on your IT?
Describe the project or the challenge in a few lines — we come back with concrete steps, not a generic quote.
