Training, exams and certification
Training, exams and certification
From management-body accountability to the ten minimum measures of Article 21 and incident reporting under Article 23, with the thresholds of Implementing Regulation (EU) 2024/2690, each requirement is linked to ISO/IEC 27001:2022 Annex A.
By Claudio Restaino ·
Scope and registration, governance and training of the management body, risk analysis and policies, incident handling, business continuity and crisis management, supply chain security, secure development and vulnerability handling, effectiveness assessment, cyber hygiene, cryptography, HR security and access control, multi-factor authentication, incident reporting and information sharing, supervision and the interplay with DORA, CER and the Cyber Resilience Act.
Regulatory status: Snapshot of 31 October 2026: 24 Member States have transposed NIS2; the Commission referred the remaining ones to the Court of Justice in July 2026. CRA vulnerability reporting applies since 11 September 2026. The January 2026 NIS2 amendment proposal and the Digital Omnibus single reporting entry point are labelled as proposals.
Nothing is sent to our servers: the assessment runs entirely in the browser, and you can download a save file to resume later or share with colleagues. No account is needed.
Compliance, legal, IT security and risk functions, DPOs, CISOs, consultants and auditors who need a quick, structured picture of where an organisation stands before planning a compliance programme or a certification.
The assessment is part of the GoToCertify Compliance Self-Assessment Hub, which also offers free assessments for the EU AI Act, the GDPR, NIS2 and DORA.
Yes. The requirements follow the Directive and the Implementing Regulation, which set the common baseline; national decrees add detail and reporting templates, which the guidance tells you to check.
Yes. Every one of the 93 Annex A controls is linked to at least one requirement, so the coverage map doubles as a gap analysis for the ISMS.
Yes, with no registration. The assessment and the PDF report are generated in your browser and nothing is stored by GoToCertify.
Free, no registration, PDF report included.
Start the NIS2 self-assessment
BITIL.COM is an ATO (Accredited Training Organization) and an AEO (Approved Examination Organization) of PeopleCert. PRINCE2® and PRINCE2 Agile® are registered trade marks of PeopleCert.
