FREE WORKSHOP PACK
Run your own NIS2
readiness workshop.
Free.
A half-day workshop pack that takes you from "is this our problem?" to a documented, defensible implementation plan.
Built specifically for mid-market energy companies.
Most teams start here. Executive Assurance: an optional, independent next step, is covered further down.
WHAT YOU GET
Not a guide. The actual material we use with paying clients.
Two working documents, not one PDF guide - structured so you can run a real half-day session with your own leadership and technical teams.
01
The NIS2 Readiness Workshop presentation
A complete walkthrough of the Directive, structured for energy-sector entities. Covering scope, the articles that actually apply to you, and where your existing ISMS already does the work versus where it doesn't.
02
The Statement of Applicability & Implementation Register
A working document you fill in as you go. By the end of the workshop, it's no longer a worksheet — it's your action plan. It also doubles as your evidence file if a regulator or customer ever asks you to demonstrate compliance.
WHAT'S COVERED
A structured path from "does this apply to us?" to a documented plan.
01
02
03
04
05
Understanding the Directive
What NIS2 actually requires, in plain language.
Scope: do you fall under NIS2?
A structured walk-through of the sector, size, and designation criteria that determine whether you're in scope and at what level.
Defining your own scope
Once you know NIS2 applies, the workshop helps you draw the boundary around which systems, services, and entities the implementation actually needs to cover.
Article-by-article requirements
Every relevant article: governance, incident handling, business continuity, supply-chain security, secure development, cryptography, access control, reporting obligations, and more - broken into what it means, why it matters for an energy business specifically, and what to do about it. Each section ends with discussion questions.
ISO 27001 gap analysis
If you already hold ISO 27001 certification, this section maps exactly where your existing ISMS already satisfies NIS2 and names the gaps precisely.
WHO IT'S FOR
Mid-market energy companies, whether or not you've started yet.
Utilities, metering and AMI providers, renewables operators, and energy software vendors who need to figure out where they stand on NIS2.
If you already have ISO 27001 in place, this will show you precisely how far that gets you.
If you don't, it'll show you what to build and in what order.
THERE'S TWO LAYERS
Most of the work is technical.
Most of the point isn't.
Technical implementation is most of the work. But it isn't most of what the Directive is checking for.
Most of what's in this pack is the technical layer: ISO 27001/ISMS, controls, detection, response. That's roughly 80% of NIS2 implementation, and it's what this workshop is built to help you complete.
The other 20% is separate: whether the Management Body itself can demonstrate it has met its own responsibilities under the Directive: participation, oversight, escalation, evidenced leadership.
It's rarely checked independently.
WHAT HAPPENS NEXT
Wherever you are,
there's a next step.
The pack takes you a long way on your own.
There are three ways forward - pick the one that fits.
Doing it yourself. Run the workshop, complete the Statement of Applicability, implement what it tells you.
The pack is yours. No obligation. No follow-up required.
Underway, and want independent confirmation that leadership has met its own responsibility. NIS2 Executive Assurance Assessment is a fixed-fee, two-day, independent assessment of whether the Management Body can demonstrate it has fulfilled its own NIS2 responsibilities separate from, and alongside, the technical implementation. One engagement, two reports: a leadership-ready briefing note and a technical findings report.
No time to run it yourself. Running the workshop, completing the Statement of Applicability, and implementing appropriately takes weeks of scarce senior time that most teams don't have. If that's your situation, arrange a call to talk through implementation. It's scoped to your organisation and delivered personally, with no hand-off to juniors, so it's built to withstand scrutiny rather than just tick a box.
Get the free workshop pack
Enter your email and the presentation and Statement of Applicability arrive immediately.