Management-body accountability and risk governance
Certification and compliance
NIS2
Organise NIS2 measures, ownership and evidence
ISO:OK coordinates cybersecurity risk management, security measures, suppliers and the activities needed to demonstrate implementation of NIS2 obligations.
Overview
How ISO:OK supports NIS2
ISO:OK helps you work out whether and how you fall within NIS2, starting from sector, size and turnover. The assessment stays documented.
The requirements of the Italian National Cybersecurity Agency (ACN) are already loaded: you record the implementation status of each one and the Statement of Applicability is drawn from the data. Incidents have a register with the notifications sent and their dates.
Asset inventory, access, vulnerabilities, backups, business continuity, suppliers and training of management bodies each have their own register. If you already have ISO 27001, you find the same data.
What you can manage
A structured path for NIS2
Technical, operational and organisational security measures
Incidents, continuity, supply chain and evidence collection
The result
From requirements to verifiable evidence
Obligations and measures become assigned, verifiable activities with an up-to-date view of the gaps still to close.
One platform, one source of truth
- Guided activities with ownership and deadlines
- Documents, records and evidence in the same environment
- Coverage map to identify gaps before the audit
- Shared information across multiple standards
Who it is for
Designed for companies and consultants
For essential or important entities, their suppliers and consultants working on NIS2 compliance.
FAQ
Frequently asked questions
How does it help me understand whether I fall within NIS2?
With a qualification form that starts from sector, size and turnover and documents the assessment made by the company.
Where do I keep incidents and notifications?
In a register that lists each incident with its classification and the notifications sent, with dates.
Can I manage NIS2 and ISO 27001 together?
Yes: inventory, access, vulnerabilities, patches, continuity and incidents are the same registers.
Can consultants manage several client companies?
Yes. Consultants can work with several organisations while keeping users, roles, activities and documents separated.
Start managing NIS2 with ISO:OK
Explore a dedicated environment for free, with sample data already loaded. If you prefer, we will guide you with a presentation.