Case study · anonymised
NIS2 without the panic
The matter is anonymised — client type, industry and scale. Past results do not guarantee future outcomes.
- Client type
- Infrastructure company
- Industry
- Digital services
- Scale
- Implementation ahead of the statutory deadline
Problem
What they came with
The company didn’t know whether it was subject to NIS2 at all, and if so — which obligations applied. The interpretations circulating in the industry were contradictory and caused needless panic.
The board needed a hard answer, not another presentation about "NIS2 is coming".
Solution
What we did
We checked whether and in which category the company fell under the directive. We translated the rule into a concrete list of obligations.
We implemented policies and procedures proportionally to scale — without building the compliance apparatus of a large corporation.
Outcome
The company knows whether and to what extent it’s subject to NIS2, has policies in place before the statutory deadline and a process to update them. The panic is gone, replaced by a concrete list of things done.
Practice area
Lawyers in charge
Aleksandra NowakAssociate
First step
Sound familiar? Book a call.
30 minutes, no strings attached.
Booking a call does not create a lawyer–client relationship.