NIS-2 Compliance –
Consulting, Impact Assessment & Training

What is the NIS-2 Directive?

From 2026, the NIS-2 Directive will require significantly more companies in the EU to implement comprehensive cybersecurity measures. Organisations in critical sectors such as energy, transport, healthcare, digital services, public administration and other security-related industries are particularly affected. The directive requires verifiable risk management, clear reporting processes, structured incident response procedures and regular training for employees and managers.

Our NIS-2 Services for your company

To quickly gain clarity, Nexia offers a complete service for your NIS-2 implementation – from impact assessment and gap analysis to the implementation of all requirements in accordance with NIS-2 and BSIG.

Our Services at a glance

• NIS-2 impact assessment
  We check whether your company falls under the NIS-2 directive – based on your industry, company size, turnover and role in the supply chain. You will receive a clear assessment with documented results and recommendations for action.
   
• Gap analysis & maturity assessment
  We analyse your existing processes, policies and security measures. This allows you to immediately identify areas where action is needed and which measures should be prioritised.
   
• Development or expansion of your ISMS
  We develop or optimise your information security management system (ISMS) in accordance with NIS-2 requirements – efficiently, structurally and in compliance with standards such as ISO 27001.
   
• Implementation of technical and organisational measures
  We support you in all security-related obligations, including:
  • Incident detection and monitoring
  • Reporting processes
  • Patch and vulnerability management
  • Multi-factor authentication
  • Backup and emergency concepts
  • Supply chains and third-party security
     
• Training
  Our NIS-2 training courses fully comply with the legal requirements for management in accordance with NIS-2 and the German implementation law and offer certified certificates of attendance as official proof for the BSI as the competent supervisory authority.