Next-Gen

Compliance

The clock is ticking. Get NIS2 compliant fast!

The NIS2 (Cyberbeveiligingswet) is now a reality. As of August 15, 2026, over 8,000 organizations in the Netherlands and tens of thousands of suppliers in their supply chains must be able to demonstrate compliance with the legal requirements. Fendix assesses your current status and guides you step-by-step toward verifiable compliance in just 8 weeks.

Compliant within 8 weeks

Concrete recommendations

Altijd een vaste consultant

Fendix has helped 650+ companies with information security, from startups to enterprises.

Twee mannen werken samen aan een computer, met uitzicht op grote ramen en een kantoorplant op de voorgrond.

The NIS2 gap analysis is an integral part of our compliance implementation process. During the gap analysis, a consultant will show you exactly what is already in place, what still needs to be done, and how you can address this yourself immediately. This saves you valuable time and money while providing a clear picture of your company's current status.

Next-Gen

Context

Je bent waarschijnlijk verder dan je denkt

Compliance should be simple.

The NIS2 (Cyberbeveiligingswet) is new to everyone, and no two organizations start from the same position. At Fendix, we combine our knowledge of the legislation with our day-to-day experience in information security, privacy, AI, and ISO certifications. And we believe it should be simple.We are happy to explain what NIS2 means for your organization, regardless of your position in the supply chain. Our consultants have experience in your sector and understand the various roles defined by the legislation. We support you from the initial gap analysis through to full guidance toward demonstrable compliance in just 8 weeks, including ISO 27001 certification if required.

What does a NIS2 gap analysis offer you?

Immediate insight

Within one business day, we will tell you what is already set up, what could be improved, and what concrete steps you need to take to comply with the NIS2 (Cyberbeveiligingswet).

Persoonlijke aansprakelijkheid

We translate NIS2 requirements into practical and clear recommendations. Our consultant will tailor these to your company.

Clear report

We will send you a report describing, for each control and topic, what is already in place, what still needs to be done, and how you can handle this yourself.

Download our NIS2 quick scan

Does NIS2 apply to you? With our quick scan, you can immediately see where you stand in relation to the NIS2 (Cyberbeveiligingswet). Many organizations struggle to determine their role within the NIS2 directive.

What are the benefits of NIS2 compliance for you?

Comply with legal obligations

Avoid issues with regulatory authorities and prevent audits or hefty fines.

Meeting client requirements

Ensure you meet client requirements for tenders, bids, or existing partnerships.

Strategic competitive advantage

You can enter into new partnerships with clients because you are demonstrably compliant.

What we will do

Knowing where you stand

In our gap analysis, we map out whether and how your organization falls under NIS2, and where you currently stand in relation to the requirements.

Setting priorities

Based on your risk profile, the gap analysis, and your position in the supply chain (supplier, SME, or essential entity), we will determine the fastest and most logical path to compliance together, as well as who is responsible for it.

Implementing measures

We guide you through the risk analysis and the implementation of technical and organizational measures, such as incident processes and access management. Designed to be practical, so your business can maintain it long-term.

Demonstrably compliant

We register you with the NCSC and document what you have arranged. If the regulator visits, you can demonstrate what has been done, so you don't have to explain it on your own.

They led the way

What other industry leaders say

“The great thing is that you notice information security is increasingly becoming part of daily practice. People are now asking themselves: what about the risks? That means it's alive within the organization, thanks in part to Fendix. And that's exactly what we wanted to achieve."

Angelique van Hassel

Managing Director, Head of Benelux Heras.

"If you lack the in-house expertise, it's crucial to engage an organization like Fendix. It has helped us refine our processes and ensures that we stay informed about changes in standards and regulations. And they truly became part of the team."

Angelo Derksen

Developer NowOnline

“Information security has become an integral part of our work. We keep improving and optimizing processes where necessary. Fendix has played an important role in this.”

Linda

Security Officer and Manager Supporting Teams at Stap & Care Group

“What this week has made clear is that cybersecurity is not just the responsibility of our IT department, but of all of us. Fendix takes care of all the arrangements.”

Joeri van de Watering

CEO Goose VPN

You have questions, we have answers

Frequently asked questions about the NIS2 (Cyberbeveiligingswet), information security, and compliance.

Does my organization fall under the NIS2?

The directive identifies two groups: essential sectors and important sectors. Think of healthcare, energy, IT service providers, transport companies, water management, cloud providers, and digital infrastructure.

In addition, NIS2 considers company size:

more than 50 employees, or
more than 10 million euros in revenue.

In that case, you are generally subject to the legislation, unless you operate in a non-relevant sector. However, for SMEs, one category is particularly crucial: supply chain providers. For example, are you a hardware supplier of network components for a hospital? Then you may still fall under NIS2 legislation because your services have a direct impact on the continuity of others. This will be the largest group within the SME sector.

I already have ISO 27001 certification; does that automatically make me NIS2-compliant?

No, not automatically. However, you are a significant step closer. Large parts of your existing management system already count toward compliance, which will speed up your journey to demonstrable NIS2 compliance.

What happens if I do not comply with NIS2?

Supervisory authorities can impose fines of up to 10 million euros or 2% of total global annual turnover. In such cases, directors are held personally liable.

How quickly can you complete an implementation?

Fast. But always carefully. The turnaround time depends on the size and complexity of your organization. For many SMEs, we implement them within a few weeks to a few months. We start with a clear schedule and clear milestones. So you know exactly where you stand without unnecessary delays.

‍

Specialisten van Fendix begeleiden een organisatie bij de implementatie van de ISO 27001 norm in regio Utrecht & Gelderland.

Take the free NIS2 check

After an hour with Kilian, you will know exactly what your role is under the NIS2 (Cyberbeveiligingswet) and whether you can start taking steps toward compliance yourself. Leave your details here and we will contact you as soon as possible!