NIS Regulations Remediation Service

NIS Regulations Remediation Service overview

• Identify your obligations as OES (operators of essential services) under the NIS Regulations or as an RDSP (relevant digital service provider) under the Implementing Regulation.
• Identify the competent authority’s interpretation of the CAF(Cyber Assessment Framework) or ENISA’s technical guidance, as appropriate.
• Receive remediation advice to resolve gaps and best-practice guidance to improve maturity.
• Develop policies and standard operating procedures based on your organisation’s specific requirements.

  Download sample documents

Benefits of using this service

Who is this service for?

This service is designed to help OES and RDSPs meet their requirements under the NIS Regulations 2018.

We advise you undertaking the NIS Regulations Gap Analysis service first to get a true picture of how your current cyber security arrangements measure up against the requirements of the NIS Regulations.

Why choose IT Governance?

• Our consultants are all experienced information/cyber security specialists, possessing detailed knowledge of global frameworks and standards such as ISO 27001, ISO 27035, ISO 22301 and ISO 27002.
• Our unique combination of technical expertise and solid track record in international management system standards means we can deliver a complete solution for NIS Regulations compliance and manage the project from start to finish.
• We have managed hundreds of projects across all industries, including healthcare, energy, transport, water, defence and aerospace.
• We have multidisciplinary teams that can undertake rigorous penetration testing of your systems and networks, project managers to roll out compliance implementation projects, and executive expertise to brief your board and develop a suitable risk mitigation strategy.
• We deliver practical advice and work according to your budget and organisational needs.
• We deliver the entire suite of consultancy, training, tests and tools needed for NIS Regulations compliance.
• We are a CREST-approved penetration testing organisation and a Cyber Essentials certification body.
• Our team of experts can attend your site to support your organisation during an audit by a competent authority. We are also available to conduct mock compliance inspections and audits.
• We have led more than 800 ISO 27001 certification and implementation projects globally, making us a pioneer of the Standard, which is recommended as guidance by both ENISA and the NCSC.

* Terms and conditions apply.