Gap and risk register
The gaps and risks we find, each item with the evidence it is based on.
NIS2 Readiness Assessment · in English
NIS2 readiness: your gaps, your risks and a 90-day plan your management can act on
An internal readiness check against the duties of Directive (EU) 2022/2555 (NIS2), run in English. We help you map what is relevant to you and prepare material for your management: a gap and risk register, a management report and a remediation plan in 0–30, 31–60 and 61–90 day bands.
For foreign-owned companies in Czechia with English-speaking management, and for Google Cloud clients abroad.
od 39 000 Kč bez DPHStarting price, one-off, in Czech crowns, excluding VAT. We confirm the final scope and price in a written offer.
Opens our English contact form with the NIS2 Readiness Assessment selected. Your request is used to clarify your needs and the scope of the work.
What you get
Material your management can decide on
Management report
A plain-language summary of where you stand and of the main risks, which we present to your management in a joint meeting.
90-day remediation plan
Steps ranked by priority into 0–30, 31–60 and 61–90 day bands, sized so your team can actually carry them out.
A round of factual comments
You can comment on the outputs, and we correct factual inaccuracies before the final handover.
Why management
NIS2 puts cybersecurity on the management agenda
Directive (EU) 2022/2555 sets cybersecurity risk-management and incident-reporting duties for the entities in its scope, and expects their management bodies to approve those measures and oversee how they are put in place. The assessment gives your management a factual starting point: what is in place, what is missing and what to do first.
What we cover
Areas and steps of the assessment
Risk management, identity and access management, backup and recovery, event logging and monitoring, incident response and supplier management.
- ScopingWe agree which companies, services and locations the assessment covers, and how many systems and suppliers we review as a sample. We confirm the final scope and price in a written offer.
- Documents and interviewsWe review a sample of your documents and talk to the people responsible for each area.
- WorkshopIn a joint workshop we go through the findings and agree the priorities.
- Handover to managementWe present the results to your management and hand over the final outputs after the round of factual comments.
Not included: implementing the remediation (we offer it as a separate service), active scanning, or new restore tests from your production environment. This is not legal advice, a certification or an audit.
Who it is for
Two kinds of teams we run it for
Foreign-owned companies in Czechia
Your management works in English. We run the interviews and the workshop and write the management report in English, so the people who decide read the findings first-hand.
Google Cloud clients abroad
If your workloads run on Google Cloud, say so in your request. We can discuss running the assessment alongside our GCP Security Hardening Sprint; each service is agreed separately.
Not a fit if you need a legal opinion, a certification or a formal audit: this assessment is not any of those.
Questions before you request
What does the assessment cost?
od 39 000 Kč bez DPH: a starting price, one-off, in Czech crowns and excluding VAT. The final price depends on the scope we agree together, and we confirm it in a written offer.
Are prices shown with VAT?
No. Cloudpeakify is a VAT payer, and all prices on this page exclude VAT. The service is for businesses.
Will you tell us whether NIS2 applies to us?
No. We do not give legal advice or legal opinions, and we do not interpret any country's national law. We help you map what is relevant to you and prepare material for your management; ask your legal counsel for the legal interpretation.
Our company is outside Czechia. Can you help?
Yes. Tell us in your request where your company and your systems are; we agree the scope and the way we work in the written offer.
We run on Google Cloud. Can this be part of a security sprint?
Mention it in your request. We can discuss combining the readiness assessment with our GCP Security Hardening Sprint; each service is agreed and priced separately.
Do we have to continue with you after the assessment?
No. Each service is agreed separately. You can carry out the remediation plan yourselves, with us or with another provider.
Do you guarantee NIS2 compliance, a certification or an audit result?
No. The assessment gives you a picture of where you stand and a remediation plan. It is not a guarantee of compliance, a certification, an audit or legal advice.
Start with a readiness assessment
In your request, tell us your sector, your approximate headcount, where your systems run and what you already have in place. Your request is used to clarify your needs and the scope of the work.