Support for KSC and NIS2 implementation

Day to day I work on implementing NIS2 and KSC amendment requirements in a large organisation. I help companies organise cybersecurity requirements — from current-state and gap assessment to documentation, risk management and incident processes. The perspective is practical delivery, not a report alone.

Let's talk about cybersecurity

Project kickoff

  1. 1Discussion of business context, scope and priorities
  2. 2Current-state review: systems, processes, documentation, gaps
  3. 3Plan to organise requirements and quick wins
  4. 4Support implementing agreed actions (docs, processes, technical steps)

I handle design and delivery directly — with contact through analysis, delivery and further development.

Who it is for

  • Organisations covered by or preparing for NIS2 / KSC requirements
  • Companies needing an IT security audit with a concrete action plan
  • Teams before an application or API pentest
  • SMEs without a dedicated CISO that want to organise risks and responsibilities
Go to the contact form

Problems I solve

  • NIS2 is a known label, but nobody knows where to start
  • Documentation exists on paper, while processes do not work in practice
  • No inventory of systems, roles and responsibilities
  • An audit or B2B client asks about security and answers are scattered

Scope of work

Initial scope mapping and implementation priorities
Current-state and gap assessment within the agreed scope
Map of systems, services and suppliers supporting operations
ISMS — controls, evidence of operation and implementation plan
Normative and operational documentation
Roles, responsibilities and cybersecurity structure
Incident process — detection, handling and reporting
Preparation for System S46 (Cyber Hub)
Audit preparation (including KSC-required audit)
Technical support: hardening, backups, monitoring, access

How collaboration works

  1. Discussion of business context, scope and priorities
  2. Current-state review: systems, processes, documentation, gaps
  3. Plan to organise requirements and quick wins
  4. Support implementing agreed actions (docs, processes, technical steps)
  5. Review of outcomes and next steps — including audit or pentest if needed

What you get

  • A clear picture of state and gaps within the agreed scope
  • Prioritised recommendations with a sensible order of work
  • Ownership map and a prioritised action plan
  • List of required artefacts (documentation, processes, controls)

FAQ

Do you guarantee full NIS2 compliance?

No. I offer implementation support, preparation and organising requirements. I do not provide legal services and I do not guarantee certification. Formal legal assessment and entity qualification belong to the right roles in the organisation or to legal counsel.

How does implementation support differ from an IT audit?

Implementation support helps organise requirements, processes and artefacts in day-to-day work. An IT audit is a structured review of infrastructure, applications and procedures with a prioritised report. I often combine both — first organise requirements, then deepen with an audit or pentest.

Do you also run penetration tests?

Yes — application and API pentests are a separate service linked to this area.

Where should we start if we do not know where we stand?

With a short call and a current-state review. You can also start with the IT security quiz, then move to an audit or NIS2 support.

Related services and articles

Ready to discuss scope?

Write briefly about the goal, audience and materials you already have. I will reply with a proposed next step.

Let's talk about cybersecurity