Framework toolkit
EU NIS2 Directive Essential & Important Entities Toolkit
12 editable templates: 7 Word, 5 Excel. Each one is listed below with page 1 and its sections.
₹7,999 incl. GST
Review cart (0)- 12 files you can edit in Word and Excel
- UPI, card or netbanking through Razorpay
Three of the 12. Open one to see its full outline.
Word38 KB
NIS2 Business Continuity Crisis Management Policy
- 1. Purpose
- 2. Scope
- 3. Backup Management
- 4. Disaster Recovery
- + 4 more
Excel10 KB
NIS2 Gap Assessment
- NIS2 Gap
- Summary
Excel9 KB
NIS2 Incident Register
- NIS2 Incidents
What you get
All 12 files in this toolkit
Registers, logs and trackers3
-
NIS2 Incident Register
A register of incidents and the NIS2 Article 23 reporting deadlines: an early warning within 24 hours, an incident notification within 72 hours, and a final report…
-
NIS2 Scope Applicability AssessmentA short assessment to determine whether the NIS2 directive (Directive (EU) 2022/2555) applies to your organisation and, if so, whether you are an essential or an…
-
NIS2 Supplier Security RegisterA register of your direct suppliers and service providers and their security, which NIS2 requires you to consider as part of supply-chain security (Article 21(2)(d) and…
Assessments and checklists1
Plans, procedures and forms2
-
NIS2 Compliance RoadmapA roadmap to drive your NIS2 gap assessment into a prioritised, owned action plan.
-
NIS2 Incident Reporting Procedure✎ Set your significance criteria and the CSIRT/authority you report to, then follow the 24h/72h/one-month stages.
Policies and standards6
-
NIS2 Business Continuity Crisis Management Policy
✎ Set your backup scope and frequency, recovery objectives and crisis-management team.
-
NIS2 Cryptography Policy✎ List your approved algorithms and where encryption is mandatory, and how keys are managed.
-
NIS2 Cyber Hygiene Training Policy✎ Set your training cadence and platform and your baseline cyber-hygiene standards.
-
NIS2 Governance Management Body Policy✎ Set how often the management body reviews cybersecurity and record its approval of the measures.
-
NIS2 Risk Management Measures Policy✎ Confirm your entity type, then reference where each of the ten measures is implemented in the bracketed fields.
-
NIS2 Supply Chain Security Policy✎ Define your supplier criticality tiers and security requirements, and how you assess and review suppliers.
₹7,999 incl. GST
How the files fit together
A suggested order
Our suggestion, not a requirement of the standard or the law.
- 1
Find the gaps
Start with the assessment workbooks to see where you stand.
1 file: NIS2 Gap Assessment
- 2
Plan the work and the response
Use the plans, procedures and forms to set owners, dates and the steps to follow.
2 files: NIS2 Compliance Roadmap, NIS2 Incident Reporting Procedure
- 3
Approve the policies
Edit the policies to match how you work, then get them approved.
6 files: NIS2 Business Continuity Crisis Management Policy, NIS2 Cryptography Policy, NIS2 Cyber Hygiene Training Policy, NIS2 Governance Management Body Policy and more
- 4
Keep the records
Keep the registers and logs up to date as evidence for an audit or a review.
3 files: NIS2 Incident Register, NIS2 Scope Applicability Assessment, NIS2 Supplier Security Register
Questions
Before you buy
What exactly do I get?
12 editable files (7 Word, 5 Excel). Every file is listed on this page with its file name, size and number of sections.
How are the files delivered?
Digitally, after your payment is confirmed: we email download links to the address you gave at checkout. Each link works for 2 hours; you can ask for a fresh one from My purchases. Nothing is shipped.
How do I pay?
Through Razorpay, by UPI, card or netbanking.
Is GST included?
Yes. The price includes GST. To get a GST invoice, email [email protected] with your billing name, address and GSTIN.
Are these official documents of the standard body or regulator?
No. They are templates supplied by CynorSense Solutions Pvt. Ltd. They are not issued or endorsed by any standard body or regulator, and they are not legal advice. Using them does not by itself make an organisation compliant or certified.