Scope and gap check
Assessment by sector, size, and supply chain pressure with a prioritized pre-audit list.
Home / Services / NIS2 Compliance
NIS2 sits with the board. So does the evidence.
Clarify scope, meet deadlines, deliver proof.
Board accountability cannot be delegated. Auditors ask for evidence, not intentions. We deliver the evidence: sealed network, immutable backups, tested servers, documented reporting lines.
We clarify whether NIS2, DORA, or supply chain pressure applies to you, which deadlines bind you, and which gaps to close before the first audit across SEC Cyber Disclosure Rules (Form 8-K & Reg S-K), NIST CSF 2.0, and SOC 2.
Technical evidence
Segmentation, backup locks, identity paths, and logs documented from AuraLink, AuraCore, and Aura.
Reporting and ownership
Clear escalation, deadline calendar, and templates for regulators, auditors, and enterprise customers.
Approach: check, harden, evidence, mandate
In the check we assess scope, existing controls, and backup locks through an auditor lens.
In hardening we close critical gaps with your IT: segmentation, admin paths, cloud boundaries, backup locks.
In evidence you receive audit-ready documentation, optionally inside an ongoing CISO advisory mandate.
Common questions
Which companies fall under NIS2, DORA, or enterprise supply-chain security audits?
NIS2 typically applies from 50 employees or EUR 10 million revenue in 18 sectors, alongside DORA in financial services. Even below statutory thresholds, enterprise customers enforce equivalent controls through supply-chain contracts. Identiqa assesses your exact scope and closes technical gaps before audit.
What incident reporting deadlines apply under NIS2, GDPR, and SEC Cyber Rules?
EU NIS2 enforces a 24-hour early warning, 72-hour notification, and 14-day final report, alongside 72-hour GDPR reporting and four-business-day SEC Form 8-K Item 1.05 disclosure in the US. Identiqa maps your exact duties per market and backs them with 24/7 incident response.
What technical evidence do auditors ask for first in a cyber governance audit?
Auditors verify live controls rather than policy binders: risk management with clear owners, automated network edge containment, a backup concept with cryptographic storage-lock proof (AuraLink), and documented reporting lines with deadlines.
In your rack. On the cloud contract you already have.
We size Identiqa to your infrastructure and sites. Buy directly through Identiqa or on your existing agreement with Amazon Web Services, Google Cloud, or Microsoft Azure.
Architecture briefing & advisory