Information security management system – KSC and NIS2 requirements
Essential and important entities must implement a security management system. We translate the statutory requirements into documents and procedures tailored to the organisation.
Scope of services
- Gap analysis against the statutory requirements.
- Risk assessment and selection of technical and organisational measures.
- Security, access management, business continuity and backup policies.
- Roles and responsibilities within the organisation.
- Documentation required for inspections and audits.
Working with IT
We prepare the legal requirements together with the IT department or the external security provider so that the documentation reflects the actual safeguards.
Frequently asked questions
Does the system have to be ISO 27001 certified?
The Act does not require certification. ISO/IEC 27001 is, however, a useful reference, and organisations that have implemented it are at an advantage.
Let us discuss your matter
The first conversation is used to define the scope of the matter and the fee.