NIS2 Impl. — sample audit checklist
The first section rendered in full, plus the table of contents for the rest, watermarked SAMPLE. See exactly how the questions, evidence prompts and source text read before you buy. Free, no email required.
The NIS2 implementing regulation spells out the specific technical and methodological measures — far more granular than the directive. Auditing against the directive alone leaves the detail untested.
Why now
The implementing regulation (EU) 2024/2690 is in force for the entities it covers. Its detailed measures are exactly what a competent-authority technical review will check.
What you get for €600
01
Every provision mapped
All 328 audit questions trace to a specific article, annex or clause of NIS2 Impl.. Nothing is hand-waved: each provision is either covered by one or more questions or explicitly recorded as informational. The free Compliance Matrix proves it, line by line.
02
Built to survive scrutiny
Authored and reviewed by compliance management professionals with decades of regulatory experience, against a stated version of NIS2 Impl.. Source text is reproduced verbatim per question, with suggested evidence inline — so an auditor (or a regulator) can follow every answer back to the regulation.
03
Hundreds of hours, ready Monday
The decomposition, evidence prompts and classification scheme are done. Five ready-to-use formats, delivered on payment, that drop straight into your audit process or your GRC tool — instead of months building a checklist from the raw regulation.
COMPLIANCE MATRIX — FREE, UNGATED
Every provision of NIS2 Impl., accounted for.
Before you spend a cent, download the Compliance Matrix. Every leaf of the regulation appears as a row, with its coverage status and the audit questions that map to it. It is the proof that this checklist is complete — and the artefact your own auditor can use to check the checker.
328
Audit questions
100%
Provisions accounted for
5
Artefact formats
12
Months of updates
Authored and reviewed by compliance management professionals. Reviewed against v2024-10-17; each Compliance Matrix states the exact version it was verified against.
See a sample first
Pricing
One regulation, one organisation, 12 months of updates included. A single invoice — not a subscription, nothing auto-debited.
Every amendment to NIS2 Impl. within your 12-month window is re-rendered against the new version and emailed to you automatically. When the 12 months end you keep every artefact you've downloaded — you simply stop receiving new amendments unless you renew.
| Licence | Price | What it covers |
|---|---|---|
| Single organisation | €600 | Use across your organisation, 12 months of updates, all five artefact formats plus the Compliance Matrix. |
Licensing for a group of separate legal entities? Contact us for group licensing.
What you'll receive
Five formats of the same reviewed content, covering the full NIS2 Impl., delivered by email the moment payment clears. Every amendment during your 12-month window is re-rendered and emailed automatically. Everything you download is yours to keep.
- 01 Audit Checklist The auditor's working document. Per-question blocks with a compliance state, four-state classification and finding-level boxes, the regulation source text verbatim plus suggested evidence inline, and a management-system reference field. Print-ready. PDF
- 02 Audit Checklist The same content as plain text. Diff it against last year's edition, drop it into Confluence / Notion / your internal wiki via pandoc, or feed it to internal review tooling. MD
- 03 Audit Workbook Multi-sheet workbook mirroring the PDF: cover, per-section sheets with dropdowns and conditional formatting, Findings Log, Cross-Reference Register and Dashboard. XLSX
- 04 Data Bank A flat one-row-per-question table. The universal format for upload into third-party audit and GRC software, or your own in-house tooling. Opens directly in Excel. CSV
- 05 Question Bank A lean structured schema: citation, regulatory hook, question text, classification options, severity, applicability. A stable XSD contract for structured ingestion into third-party audit and GRC software. XML