NIS2Ready
NIS2Ready
Updated 11 September 2026 · honest comparison, including what we do not do
There are three common ways to approach NIS2 readiness. They solve different problems and are often used together, starting with a gap analysis, then remediation, and only later formal certification if your customers or authority require it.
| Dimension | NIS2Ready | Consultancy | Certification |
|---|---|---|---|
| What it is | Automated self-assessment and gap analysis against NIS2 Art. 21 (plus Portugal's RJC/QNRCS) | Human-led review: interviews, document analysis, workshops | Formal audit against a certification scheme (e.g., ISO/IEC 27001 or national NIS2 schemes) by an accredited auditor |
| Output | PDF report: score, per-domain gaps, risk register, legal mapping, 0–30/1–3/3–6 month action plan; optional policy pack | Tailored recommendations, often with project plans and implementation support | Certificate / attestation, and the audit evidence trail behind it |
| Typical cost | €349 (report) · €599 (report + 7 policy documents) | Usually several thousand euros; varies with scope | Typically five figures including remediation and audit |
| Time to result | About 30 minutes + instant report | Weeks | Months |
| Evidence handling | Self-reported answers; evidence indications are not verified and are marked as such | Reviewed with you, still based on information you provide | Independently audited and tested |
| What it does NOT do | Not legal advice; not an audit; not a certification; no technical vulnerability scanning | Not a certification either (unless combined with an accredited audit) | Does not fix gaps: remediation is still on you (or your provider) |
| Best for | Companies that need a documented starting point fast, at low cost, and to track progress quarter over quarter | Organisations needing hands-on implementation help | Organisations whose contracts or authority require formal proof |