01First clarify what you are assessing.
The organisation profile and the applicability judgement help you determine the scope. It is subject to review and approval by a person.
The team then completes the practical questions and clarifies any missing information.
The NIS2 Assessment02Keep the basis for the answers.
Documents are linked to the specific assessment or task. Versions and decisions from the checks keep the context for the next review.
Evidence management03Give every gap a next step.
The GAP analysis directs attention to what is not covered. The team can create a finding, a plan and tasks with owners and deadlines.
Verifying the execution is a separate step, not an automatic result of marking a task done.
GAP analysis and actions