Knowledge

The building blocks of the six steps.

Scope, inventory, gap analysis, risk assessment, Statement of Applicability, audit: what the terms mean, what ISO 27001 and the German BSI Act require, and how an auditor can tell it works in practice.

Step 1 · Plan

Set the scope

Go to step

ISMS scopeWhat your management system covers.
NIS2 scope checkWhether and how NIS2 applies to you.

Step 2 · Plan

Inventory

Go to step

Asset inventoryWhat you protect and what it depends on.
Supply chainManaging providers by criticality.

Step 3 · Plan

Gap analysis

Go to step

Gap analysisTarget against actual, per framework.
Ten minimum measuresWhat NIS2 requires in concrete terms.

Step 4 · Plan

Risks

Go to step

Risk assessmentWhat can go wrong and what it would cost.
Risk treatmentReduce, avoid, transfer or accept.

Step 5 · Do

Plan and implementation

Go to step

Statement of ApplicabilityWhich controls apply, and why.
PoliciesManagement’s direction, in writing.

Step 6 · Check · Act

Audit and improvement

Go to step

Internal auditCheck yourself before others do.
Management reviewManagement decides what changes.

The building blocks of the six steps.

Set the scope

Inventory

Gap analysis

Risks

Plan and implementation

Audit and improvement

Show us your questions.

Thank you – we have your request.