🔒 NIS2 — EU Directive 2022/2555

NIS2 — NIS2 Compliance

NIS2 compliance programme for essential and important entities in Portugal. ISO 27001 as primary evidence. ICT risk, incident reporting, supply chain security. Free quote.

Request a quote → ✉ info@bcert.org

NIS2 — key benefits

Internationally recognised in 100+ countries via IAF MLA-registered partners

Required by EU, UK and US government procurement

Supports NIS2, DORA and GDPR compliance frameworks

Expert bilingual team (EN/PT) with proprietary BALTUM tools

Competitive, predictable pricing with fixed-milestone project plan

IAF-registered certificates

All NIS2 certificates issued via BALTUM's partner network are registered in the IAF MLA (International Accreditation Forum Multilateral Recognition Arrangement) — recognised by accreditation bodies, regulators, and enterprise procurement in 100+ countries.

How BALTUM delivers certification

01

Scoping & gap analysis

Boundary definition, current-state assessment, and tailored project roadmap with fixed milestones.

02

Documentation & controls

Policy and procedure development, evidence framework mapped to the standard's control set.

03

Stage 1 & Stage 2 audit

Document review then operational audit, findings report, and formal nonconformity register.

04

Certification & surveillance

Remediation support, certificate issuance via IAF-registered partner, and surveillance planning.

Common questions about NIS2

What is NIS2?+
NIS2 (EU Directive 2022/2555) significantly expands EU cybersecurity obligations across 18 sectors, with strict ICT risk management, 24-hour incident reporting, supply chain security, and management personal liability requirements.
Who is covered by NIS2?+
Essential entities: energy, transport, banking, financial infrastructure, health, water, digital infrastructure. Important entities: postal, waste, chemicals, food, manufacturing, digital providers, and research organisations in the EU.
How does ISO 27001 satisfy NIS2 requirements?+
ISO 27001 directly addresses NIS2 ICT risk management, incident management, business continuity, and supply chain security requirements. It is the primary certification mechanism used to demonstrate NIS2 compliance.
🔒

Who needs it?

NIS2 (EU Directive 2022/2555) significantly expands EU cybersecurity obligations across 18 sectors, with strict ICT risk management, 24-hour incident reporting, supply chain security, and management personal liability requirements.

💡

Expert team. Competitive pricing.

Our team includes qualified lead auditors fluent in English and Portuguese with expertise in information security, AI governance, and privacy. Proprietary BALTUM tools streamline certification — making it cost-competitive and predictable.

📋 Request a free quote