In-scope organisation
If you are in scope, you have risk management, incident handling and reporting obligations, and management must complete training.
NIS2
NIS2 readiness, made clear
Hungary's Act LXIX of 2024 on cybersecurity, which implements NIS2, sets requirements for in-scope organisations and, indirectly, for their suppliers. We help you assess where you stand and what to fix first.
Supplier
Even if you are not in scope, your customers may ask you to demonstrate your security controls, usually by questionnaire and sometimes by on-site review.
Management
The law makes management accountable for cybersecurity measures. Our two-hour executive workshop covers what needs to be done.
Services
We start with the quick assessment and recommend next steps based on the results.
NIS2 supplier quick assessment
Questionnaire, interview and a prioritised remediation plan on a 30-point maturity scale.
per organisation
ISO/IEC 27001 and NIS2 readiness
Gap analysis and audit preparation under Hungarian Act LXIX of 2024 and related decrees.
per organisation
Information security policy
Drafting or updating policies, procedures and supporting materials.
per organisation
Incident response plan
Checklist, roles, contacts and reporting obligations.
per organisation
Business continuity: BIA, BCP, DRP
Business impact analysis, continuity and recovery plans, followed by an exercise.
per organisation
NIS2 executive workshop
Two hours on management responsibilities and actions.
per session
How the quick assessment works
Questionnaire
About 45 minutes to complete on your side.
Interview
One to one and a half hours online with IT and a manager.
Scoring
A maturity score on a 30-point scale across NIS2 domains.
Remediation plan
Prioritised actions for 30, 60 and 90 days, with owners and effort.
Important: the mandatory vulnerability assessment under the Act may only be performed by assessors registered with the Supervisory Authority for Regulated Activities (SZTFH). Bastinet is not registered; our assessments are voluntary and do not replace the mandatory assessment.