Add-on for any level

NIS2 readiness without the panic

A gap audit, the right policies, the technical controls in place and a monthly cadence that keeps you compliant. Delivered with Nordic Defence AS and kept alive inside your subscription.

From 24 900 NOK one-off + 990 NOK/mo on top of your level.

Who needs it

If you supply anyone serious, NIS2 is now your business too

  • Norwegian businesses that fall under NIS2 directly: medium to large businesses in essential or important sectors.

  • Suppliers and subcontractors whose customers are now required to control their supply chain.

  • Boards that need a documented, defensible picture of cyber risk and how it is being managed.

How it runs

Four phases, then a steady cadence

Phase 1

Gap audit

We map your business against the NIS2 control set and tell you, in plain language, where you stand and what is missing.

Phase 2

Policies and procedures

Written policies, incident handling, supplier control and risk register, tailored to your business and signed off by the leadership.

Phase 3

Technical controls

Patch routines, multi-factor authentication, backup verification, log retention and access reviews, set up with your existing tools.

Phase 4

Operate and monitor

Monthly follow-up, incident drill once a year, status report to the leadership. NIS2 is a continuous obligation, not a one-off.

Partnership

With Nordic Defence AS

We deliver NIS2 together with Nordic Defence AS, a Norwegian cyber-security partner. They handle the deep technical assessment and incident response, we operate the documentation, training and monthly cadence inside the Unilab subscription.

NIS2 questions

Honest answers

Does NIS2 apply to my business?
It applies directly to medium and large businesses in essential or important sectors, and indirectly to most suppliers to those businesses. The gap audit tells you which of these categories you fall in.
What does the leadership actually have to do?
NIS2 makes the leadership personally responsible for cyber risk management. That means signing off on policies, attending an annual review and reading a short monthly status report. We make that as light as possible.
How long does it take to be NIS2-ready?
Most small and medium businesses are documented and demonstrably compliant within three to four months. After that it is monthly operations: small tasks, kept tidy, with quarterly evidence ready for an auditor.
What if we already have an IT supplier?
Good. We work with them, we do not replace them. Our job is to make sure the controls and documentation NIS2 demands are actually in place, signed and operated month to month.
What does it cost to run on a year basis?
The pilot is from 24 900 NOK one-off for the audit and policy package. The monthly NIS2 operation is from 990 NOK on top of your level. The final price depends on your business size and sector.

Not sure if NIS2 applies to you?

We give you a free gap reading: 20 minutes, plain language, you know exactly where you stand.

Call usFree health check