NIS2 and KSC: where to start before you have 100 action items
Before writing procedures and timelines, answer three questions: do the requirements apply to your organisation, what already works, and where is the first real gap?
The same moment often comes up in conversations about NIS2 and KSC: someone opens a list of requirements, sees dozens of possible actions and has no idea which one should come first. At AIBC, we start somewhere else – by establishing what actually applies to the organisation and what is already working.
There is little value in creating a hundred action items before you know whether they solve the right problem.
1. Establish your starting point
Begin with confirmed information about the organisation, its services and its operating environment. Only then can you assess which requirements apply. If the answer is unclear, that is the first issue to resolve – before buying tools or writing procedures.
2. Check what you already have
Preparing for new requirements rarely begins with a blank page. The company may already have parts of risk management, incident response, business continuity, supplier oversight or training in place. Bring them together and compare them with the requirements relevant to the organisation.
The goal is not to produce documents for the sake of having documents. It is to separate what works, what exists only on paper, and what is genuinely missing.
3. Set the order
A good action list does not have to be long. It should identify the most important gaps, their owners and a sensible order of work. This gives the board clear decisions to make, gives teams a place to start, and stops the project from becoming an attempt to fix everything at once.
How we can help
If you need an outside view, the NIS2/KSC Readiness Review helps organise the current state and identify areas that need action. For teams that want to begin independently, we have also prepared the NIS2/KSC Readiness Pack with documents and checklists.
The point is not to start with the biggest document. It is to make sure the first step takes you in the right direction.