Standards

NIS 2

NIS2 - The new European Digital Resilience Directive

The rules are becoming stricter, the risks are increasing. We translate the European directive into a practical approach for your organization. No legal maze, but control over your duty of care and reporting.

Fendix has helped 650+ companies, from startups to enterprises.

Why choose Fendix for your NIS2 implementation?

‍

A practical plan

From complex to crystal clear

You want certainty without noise. We translate complex compliance requirements into a practical plan that your organization understands and can apply immediately.

We translate complex compliance requirements into a practical plan that your organization understands and can apply immediately.

A practical plan

Flexible and agile

Like a chameleon, we move with your culture and tools. Remote or in the office, via Teams or Slack: we work the way you do. You get a colleague, not an external auditor.

We translate complex compliance requirements into a practical plan that your organization understands and can apply immediately.

A practical plan

Guaranteed results

Our approach is tight and structured. You know exactly where you stand, what the deadline is and what it costs. We won't rest until that certificate hangs on the wall.

We translate complex compliance requirements into a practical plan that your organization understands and can apply immediately.

“NIS2 scares a lot of directors because of liability. No need for anything. If we organize the processes properly and ensure that you are 'in control', it is actually an opportunity to make your company more professional and more valuable.”

Mathijs

Oppelaar

Operational Manager & Partner

Want to know more about the standard?
Check out our resources for helpful downloads and articles.

What is NIS 2?

NIS2 is the new European network and information security directive, which replaces the old NIS directive. This directive sets mandatory cybersecurity measures for a large number of organizations.
‍

Notification obligation: Incidents that cause significant disruption must be reported to relevant authorities, such as the CSIRT, within 24 hours.
‍
Duty of care: Necessary security measures must be taken to ensure digital safety and the continuity of service. For example, drawing up policy and carrying out a risk assessment.
‍
Registration requirement: All essential and important entities must register in the entity register accessible via the “My NCSC” portal.
‍
Supervision and enforcement: Fines are imposed for non-compliance with these obligations.

‍

In short, complying with the NIS2 directive is an investment in the future-proofing and success of your organization. That's why we offer GAP analyses on, so you know exactly which steps are still needed to comply with the standard.

Download ISO 27001 vs NIS2 white paper

Lees alles over de verschillen en overeenkomsten tussen NIS2 en ISO 27001 in onze whitepaper.

Your route to NIS 2 in 7 steps

‍

GAP analysis

How does your organization compare to the norm? You get a (glass) clear overview of the missing parts and a clear roadmap for the rest of the steps.

Risk analysis

This is where we make the difference. We set up the management system for you and write the policy. Practical, workable and to the point. We do the heavy lifting.

The management system and policy

We translate the standard requirements to your organization. Practically workable in a management system, including relevant policy documents, scope and responsible division of roles. Don't worry, we keep everything manageable.

Awareness

From policy to practice, people make the difference. We train your team so that information security becomes second nature. From the front desk to the boardroom.

Internal Audit + Executive Review

Are we ready? We carry out a strict internal audit and evaluate the status with management. We test the system and fix the final touches. This way, you can enter the external audit with 100% confidence.

External audit

The moment of truth. The independent auditor checks whether you meet the standard. Exciting? Maybe. But we sit next to you to guide you. Successful? Then you can fly the flag!

Remain a leader (Maintenance & Improvement)

The certificate hangs, but the world is not standing still. We remain involved as a knowledge partner to keep your system up to date. We ensure continuous improvement, so that you always stay ahead.

Success stories

What other frontrunners say

"The strength of this approach lay in the combination of expert guidance from Fendix and the structured project management enabled by Tidal Control."

Ronald van Beers

CISO & Group IT Director

"The fact that you remain so engaged with clients and want to stay informed about the process, I find positive and refreshing."

Toon van Overbruggen

Security Officer and Operations Manager

''If other founders ask me how we managed our certification so efficiently, my answer is short: go to Tidal Control for the structure and bring in Fendix for the expert consultancy. It's the ideal combination.''

Ties Verberne

Co-Founder

“An auditor is not allowed to give advice. That's why it's so helpful to have a party that can assist with interpretation and practical guidance.”

Edwin Remery

Information Security Officer

"Within 6 months, we achieved ISO 27001 and NEN 7510 certifications. With new procedures and policies, we were able to professionalize quickly. Thanks to Fendix, a big step forward for us as a start-up!"

Jan Willem Derksen

General Director

"If you lack the in-house expertise, it's crucial to engage an organization like Fendix. It has helped us refine our processes and ensures that we stay informed about changes in standards and regulations. And they truly became part of the team."

Angelo Derksen

Developer NowOnline

“What this week has made clear is that cybersecurity is not just the responsibility of our IT department, but of all of us. Fendix takes care of all the arrangements.”

Joeri van de Watering

CEO Goose VPN

“Information security has become an integral part of our work. We keep improving and optimizing processes where necessary. Fendix has played an important role in this.”

Linda

Security Officer and Manager Supporting Teams at Stap & Care Group

“The structured guidance provided by Tidal and their consulting partner Fendix, combined with the tool's templates and workflows, made it possible for us to succeed.”

Maurits Broers

Head of Delivery Nedscaper

“Jelle really made the difference. He knew how to get the entire organization involved, talks to the CEO just as easily as with employees in the factory, and is now being found by everyone for questions. We don't see him as a consultant, but as a colleague.”

Stefan Evers

Managing Director TotalEnergies Charging Solutions (NL)

“The great thing is that you notice information security is increasingly becoming part of daily practice. People are now asking themselves: what about the risks? That means it's alive within the organization, thanks in part to Fendix. And that's exactly what we wanted to achieve."

Angelique van Hassel

Managing Director, Head of Benelux Heras.

“Everyone automatically locks their car when leaving it. I wanted information security to become just as second nature, so that every employee in their role is consciously mindful of it. Fendix can help you achieve this very well.”

Bianca Bogers

Information Security Officer at GGZ Westelijk Noord-Brabant

"Fendix's Data Protection Officer ensures that we stay focused on the topic of “privacy” every month. The external perspective also provides something extra, because the internal processes are being improved.”

David Izelaar

Director at A-VISION

Your long-term knowledge partner

With Fendix, you opt for more than just certification

Of course, you can count on pace, structure and clarity in every process. We also ensure that not only the audit is correct, but also the mindset: employees who understand and comply with what safety means. As a knowledge partner, we think beyond today, so that your organization is always ready for new legislation and technology.

‍

Start a NIS2 compliance process

Resources

Legislation

What you need to know about the Digital Operational Resilience Act (DORA)

Mathijs

Kennisartikel

Five frequently asked questions about NIS2 and the Dutch Cybersecurity Act

Legislation

NIS2 and the Dutch Cybersecurity Act: 5 FAQs

Mathijs

Blog

Partners

New partnership: Fendix x InventIT for NIS2

Ruben

Blog

Ready for the future?

Schedule a free introduction

Digital resilience. Duty of care. Notification obligation. Just arranged. Let's see if you fall under the NIS2 and how we prepare your organization as efficiently as possible.

No items found.