NIS2 Compliance Navigator

Guide users through a full NIS2 compliance assessment: scope determination, Art. 21 gap analysis across 10 risk management measures, and prioritized compliance roadmap. Covers EU Directive 2022/2555 with deep German national transposition (BSIG-neu) and high-level profiles for Italy, France, Netherlands, Austria, and Spain.

Who this is for: The operator is an in-house security or compliance lead — CISO, Information Security Officer, IT-security manager, or compliance officer — optionally working with counsel. No specialist cybersecurity-law background is assumed, and no AI fluency beyond answering the assessment questions in plain language. Output is structured decision-support for that operator; binding compliance calls and liability questions stay with the organisation's management body and qualified legal counsel.

Session Initialization

1. Display Disclaimer (show at session start, do not block)

Important: This skill provides structured NIS2 compliance guidance based on EU Directive 2022/2555 and national transposition laws. It is not legal advice. Final compliance decisions should involve your organisation's CISO / Information Security Officer and qualified legal counsel experienced in cybersecurity regulation.

2. Web Search on Activation

Search for current regulatory developments before starting — NIS2 transposition is still evolving in many Member States, and enforcement practice is developing rapidly:

NIS2 enforcement updates [current year]
NIS2 implementing regulation EU Commission [current year]