Choose the right level of support: rapid readiness check, evidence preparation, risk assessment, Statement of Applicability, or monthly compliance support.
For many organizations, NIS2 and ISO/IEC 27001 partially overlap: policies, risks, incidents, suppliers, access control, backup, continuity, and evidence. ConformityAgent helps organize this information into a reusable structure for management, consultants, auditors, and partners.
Start with a focused check, expand into evidence and risk preparation, or combine NIS2 and ISO 27001 work to reduce duplicated effort.
Readiness, gap analysis and evidence preparation for organizations preparing for NIS2-related management and partner discussions.
For organizations that want to quickly understand whether NIS2 may apply to them and where they stand against the main readiness requirements.
For organizations that want to turn the readiness result into an organized set of actions, evidence, and internal responsibilities.
For organizations that want monthly support for tracking progress, updating evidence, and preparing management.
For organizations with multiple sites, complex operational flows, critical suppliers, or increased reporting requirements.
For organizations that want to structure their Information Security Management System, prepare the risk assessment, risk treatment plan, evidence, and Statement of Applicability.
For companies that want to quickly understand where they stand against ISO/IEC 27001:2022 + Amd 1:2024.
For companies that want to start structuring their ISMS before certification or before working with specialized auditors and consultants.
Recommended package for companies that want to prepare the core ISO 27001 elements: risks, controls, SoA, and evidence.
For organizations that want to prepare for ISO 27001 certification together with auditors, consultants, or specialized partners.
For organizations that want to avoid duplicated work. The same evidence, policies, risks, and controls can support both NIS2 readiness and ISO/IEC 27001 preparation.
Initial combined check for NIS2 and ISO/IEC 27001.
For organizations that want to prepare NIS2 evidence and start the ISMS structure for ISO 27001.
For organizations that want an integrated risk, evidence, control, and Statement of Applicability package.
Monthly support for organizations working in parallel on NIS2 readiness and ISMS maturity.
An overview of the available service levels for NIS2, ISO/IEC 27001, and combined packages.
| Service | Entry | Standard | Advanced | Monthly support |
|---|---|---|---|---|
| NIS2 | €950 + VAT | €3,500 + VAT | Custom quote | €599/month + VAT |
| ISO/IEC 27001 | €1,450 + VAT | €3,900 + VAT | €5,900 + VAT / from €8,500 + VAT | €799/month + VAT |
| NIS2 + ISO/IEC 27001 | €1,750 + VAT | €5,900 + VAT | €7,900 + VAT / quote | €999/month + VAT |
Each package level has a different purpose: rapid orientation, evidence preparation, risk and control structuring, or monthly support for continuous progress.
For initial orientation and quick decision-making.
You receive a structured check, a readiness score, and an initial list of areas requiring attention. This is suitable for organizations that want to quickly understand their current position without starting a large project.
For turning the assessment into a working plan.
You receive a more detailed analysis, an evidence structure, and an action register that can be tracked internally. This is the recommended level for organizations that want to start actual preparation.
For risk, controls, SoA, and stronger audit preparation.
You receive more substantial deliverables: risk register, treatment plan, control mapping and, for ISO/IEC 27001, a draft Statement of Applicability. This is suitable for organizations working seriously toward maturity or certification preparation.
For continuous progress and maintaining the compliance structure.
You receive recurring support for updating evidence, tracking actions, and preparing management discussions. A minimum 3-month period is recommended.
For NIS2, the focus is on applicability, security measures, risk management, incidents, suppliers, and evidence. For ISO/IEC 27001, the focus is on the ISMS, risk assessment, risk treatment plan, controls, and Statement of Applicability. For combined packages, we use a shared evidence structure to avoid duplicated work.
ConformityAgent packages do not represent an official audit, accredited certification, legal advice, or a guarantee of compliance. Our role is to support readiness assessment, evidence organization, risk structuring, and preparation for discussions with management, consultants, auditors, certification bodies, or legal partners.
Monthly support is suitable for organizations that want to maintain progress, update evidence, track internal actions, and prepare management discussions. A minimum 3-month period is recommended for monthly packages.
Send the initial request and we will help confirm whether a NIS2, ISO 27001 or combined package is the right starting point.