Audit NIS-2 compliance online now

Do you need a certificate confirming that your company is NIS 2 compliant? NIS2-conform.eu is a practical online questionnaire that helps you prove your compliance with the NIS 2 Directive. You will receive your NIS 2 compliance certificate immediately after successfully completing the online audit, which only takes a few hours!
Who is affected?

Companies in certain sectors with more than 50 employees or an annual turnover of more than €10 million are required by federal law to implement the requirements of the NIS 2 Directive as of December 6, 2025: The BSI offers a free test to determine whether you are affected: https://betroffenheitspruefung-nis-2.bsi.de. Affected companies must first register with the Federal Office for Information Security (BSI) in a separate BSI portal (only possible from the beginning of 2026) using an ELSTER company account.

Objective of the directive

The EU’s NIS 2 Directive aims to create uniform standards for cybersecurity throughout the Union. Among other things, it obliges companies to:
– implement structured information security management (ISMS)
– comply with comprehensive reporting requirements for IT security incidents
– demonstrably implement technical and organizational protective measures

Fines and personal liability

The legal situation is becoming significantly stricter: violations of NIS 2 requirements can result in fines of up to €10 million or 2% of global annual turnover, whichever is higher. In addition, personal liability of management is provided for by law.

Are you looking for an NIS 2 certificate? The market for certifiers and consultants is growing steadily. Since only proof of compliance is required, nis2-conform.eu saves you the money you would otherwise spend on expensive consultants, ISO certificates, or certifiers!

At nis2-conform.eu, you can obtain your certificate of conformity plus seal, in just three simple steps.
It is valid for one year!
The online audit costs € 980 net and can be renewed annually .

1. create account:

Register on our platform without obligation.

2. complete the NIS2 questionnaire:

Answer the online questionnaire that checks compliance with the NIS 2 requirements.

3. download certificate:

Download your certificate of conformity (valid for 1 year).

12 steps to NIS 2 compliance

It’s that simple: With the help of our online questionnaire, we record your needs and give you practical recommendations to ensure your company’s resilience in accordance with the NIS 2 requirements. You will receive a certificate of conformity as a PDF with your company data and a seal as a graphic for your company website or other printed materials.

1. Inventory
2. Identification of potential threats and vulnerabilities
3. Protection of critical data and information
4. Prioritization of the identified risks according to urgency
5. Risk minimization measures
6. Raising awareness among the workforce (risk communication)
7. Internal reporting
8. Monitoring, verification and regular simulation tests
9. Handling and management of security incidents (Incident Response Plans – IRP)
10. Cybersecurity team and penetration tests
11. Monitoring and reporting
12. Reporting area for security incidents to government bodies
    

Guidelines, information sheets, sample protocols

Practical, preventative and with added value: in our online audit you will find a comprehensive list of resources and guidelines to help you develop your cybersecurity strategies in accordance with the GDPR NIS-2 regulation and to sensitize and train your staff to deal with security incidents. Below you will find a selection of documents:

1. Reporting security incidents to the Federal Office for Information Security (BSI)
2. Practical tips for carrying out phishing simulation tests
3. Incident Response Plan (IRP) – Sample template
4. Disaster recovery plan – sample template
5. Leaflets to raise staff awareness and how to deal with security incidents
6. Sample protocol for the rapid restoration of services in the event of a security incident
7. Zero Trust Principle – Checklist
8. Cybersecurity policy