NIS2 compliance has two phases, and Certudo's consultancy can accompany you in both. In pre-implementation, we assist you with the CyFun maturity self-assessment and with building the plan. In implementation, we support you in putting the plan into practice, including through a NIS2 officer or vCISO role. The self-assessment and the plan remain free in the platform; consultancy comes in only when you want a specialist alongside you.
Pre-implementation: assistance with the self-assessment and plan
This is the consultancy we offer today. A Certudo consultant goes through the CyFun framework controls together with your team, requirement by requirement, with the right people in the organization. We establish the real maturity level, not just on paper, and build the implementation plan aligned with your risk context. In practice, this is the initial audit, also called a gap analysis.
The prices below cover exactly this phase: assistance with the self-assessment and with building the plan.
Implementation: putting the controls into practice
Once you have the plan, the implementation phase follows: you create the processes, implement the technical and organizational measures, configure the security tools, build the documentation and registers, and collect the evidence as you work. For this phase we offer distinct packages and, for companies without an internal security team, the NIS2 officer role and vCISO (CISO as a Service) services, in line with Art. 14 of OUG 155/2024: a person who coordinates security, reports to management and keeps in touch with DNSC, made available as a service.
How we work in the pre-implementation phase
- Preparation. Training in your team's language and planning the process together.
- CyFun assessment. We go through the controls with the process owners.
- Conclusions and plan. We build the implementation plan and present it clearly, with solutions ready to put into practice.
What you get
- A dedicated consultant throughout the self-assessment project
- Your real maturity level, across the six CyFun functions
- A concrete implementation plan, aligned with risk
- When needed, continuation into the implementation phase, with dedicated packages
Price
The consultancy at the self-assessment and plan (pre-implementation) is priced by entity type: 1,490 EUR basic entity, 3,890 EUR important entity, 4,890 EUR essential entity, plus VAT. The self-assessment and the plan remain free in the platform. For the implementation phase, packages are separate; get in touch for a quote.
See also how to choose a DNSC-attested auditor and how much NIS2 compliance costs.
See the self-assessment prices Talk to us
Frequently asked questions
What does Certudo's NIS2 consultancy cover today?
Today we offer the consultancy from the pre-implementation phase: assistance with the CyFun maturity self-assessment (the initial audit, also called a gap analysis) and with building the implementation plan. For the implementation phase itself we offer distinct packages (implementation support, NIS2 officer, vCISO), set according to your needs.
How much does the self-assessment consultancy cost?
The consultancy at the self-assessment and at building the plan is priced by classification level: 1,490 EUR for a basic entity, 3,890 EUR for an important entity, 4,890 EUR for an essential entity, plus VAT. The self-assessment and the plan remain free in the platform. Prices for the implementation phase are separate; contact us for details.
What is a NIS2 officer or a vCISO?
The NIS2 officer is the person who coordinates the security of networks and information systems, provided for by Art. 14 of OUG 155/2024. vCISO (CISO as a Service) means a security officer made available as a service, useful in the implementation phase for companies without a dedicated internal team.