Security audit and management liability
NIS2 places responsibility for cybersecurity on management. We prepare the board and the organisation for audits and inspections.
Scope of services
- Readiness review before a security audit or inspection.
- Obligations of the head of the entity and board members – approving and overseeing security measures.
- Management training required by law.
- Support in implementing audit and inspection recommendations.
Deadlines
The adaptation period ends on 3 April 2027. From 3 April 2028 administrative fines apply to most obligations, and some essential entities must complete their first audit by that date.
Frequently asked questions
What fines does NIS2 provide for?
The directive provides for fines of at least up to EUR 10 million or 2% of worldwide annual turnover for essential entities and at least up to EUR 7 million or 1.4% for important entities. The KSC Act also provides for liability of persons managing the entity.
Let us discuss your matter
The first conversation is used to define the scope of the matter and the fee.