nis2audit
Check your readiness

About nis2audit

Updated

nis2audit explains the EU NIS2 Directive in plain language: who is in scope, what security measures Article 21 requires, what management accountability means in practice, and how to audit your own readiness. Guidance about a legal obligation needs a clear source, so here it is.

Publisher and operator

nis2audit is published by SEQ SIA (registration No. 40203410806), Lastādijas iela 12 k-3, Riga, LV-1050, Latvia, trading as OffSeq, which provides security assessments and NIS2 readiness work. Contact: support@offseq.com.

The site has no connection to the European Commission, ENISA or any national supervisory authority, and it is not an accredited certification body.

Authorship and review

SEQ SIA (OffSeq) is responsible for publishing, maintaining and updating this site. Articles use team attribution. Sources are listed so readers can check the basis for the guidance.

How the content is produced

  • Obligations are cited to Directive (EU) 2022/2555 itself, with a link to the text on EUR-Lex, and to national transposition where the difference matters.
  • Where member states transpose differently or a point is still unsettled, we say so instead of stating a single confident answer.
  • The readiness scorecard on this site is a self-assessment aid. It is not an audit, a certification or a statement of compliance.
  • Penalty and scope figures are quoted from the directive text, never from secondary summaries.
  • The “Updated” date moves only when the wording changes, enforced by an automated content-hash ledger.

Commercial interest, disclosed

The operator sells NIS2 readiness assessments and security testing. A site that explains a compliance obligation is also a way for organisations that need help to find us. Read the recommendations with that interest in view.

  • Links to OffSeq are our own commercial links, not an independent endorsement.
  • No vendor, tool or consultancy pays for placement here. There is no advertising, sponsored content or affiliate income.
  • A large part of NIS2 readiness – governance, risk analysis, incident procedures, supplier terms – is internal work, and we say when an external provider adds nothing.

Nothing here determines whether your organisation is in scope, nor what your national authority will accept as compliant. Those questions need a legal opinion and, in most cases, a conversation with your regulator.

Corrections

Report errors to support@offseq.com. We correct them and re-date the page openly.