Question 1

Is my company subject to NIS2?

Accepted Answer

If you have more than 50 employees or €10M in revenue and operate in a sector listed in Annex I or II of the directive, probably yes. We offer a free 30-minute verification.

Question 2

How long does compliance take?

Accepted Answer

A gap analysis takes 2–4 weeks. A full compliance path for a mid-sized SMB typically takes 3–6 months.

Question 3

What are the risks of non-compliance?

Accepted Answer

Fines up to 2% of global annual turnover for essential entities, up to 1.4% for important entities. But the greater risk is operational: an incident without proper procedures costs far more than the fine.

Question 4

Do you have experience in my specific sector?

Accepted Answer

We primarily work with SMBs in the food & agriculture, manufacturing, and IT services sectors in Sicily. We understand the critical processes and typical infrastructure of these contexts.

Question 5

What does the NIS2 template package include?

Accepted Answer

7 customized documents: gap analysis checklist, incident register, security policy, risk analysis, IRP, supplier assessment, BCP — all adapted to your sector and size.

Cybersecurity & NIS2