NIS2 readiness — a structured self-assessment for your website
Prepare for the NIS2 requirements: a self-assessment across ten measure areas, a reporting-deadline timer, a supply chain register and a PDF record. A preparation aid — not legal advice.
The NIS2 Directive tightens cybersecurity and reporting obligations for many organisations across the EU. XICTRAQ NIS2 readiness gives you a structured self-assessment: you document your level of preparation across the ten minimum measures from Article 21(2), pre-estimate whether you may be in scope, keep an eye on incident reporting deadlines and maintain a register of your third-party services. Important: this module supports your preparation and does not replace a review by qualified experts.
NIS2 readiness — a structured self-assessment for your website features
Self-assessment: 10 measure areas
Guided self-assessment across the ten minimum measures from Article 21(2) NIS2 — from risk analysis through supply chain security to multi-factor authentication. Per item: status, note and evidence link.
Scope pre-check
Classify your sector, headcount and turnover and receive a first, non-binding indication of whether your organisation might fall within scope. Orientation, not a binding classification.
Reporting-deadline timer (24 h / 72 h / 1 month)
Log a security incident with the time you became aware of it — XICTRAQ calculates the deadlines for the early warning (24 h) and the notification (72 h) from becoming aware, and the final report one month after the notification, and reminds you in good time.
Supply chain & third-party register
Maintain a register of your providers and third-party services with category, criticality, country and whether personal data is processed. Pre-populated with the services detected on your website — you complete and assess them.
PDF record of your preparation status
Export your documented readiness status as a PDF — as an internal working basis and discussion document for your management or your advisors. With a visible disclaimer.
Readiness score as a progress indicator
A score from 0 to 100 shows how far your self-assessment has progressed across all areas. It measures your documentation progress — it makes no statement about legal compliance.
How it works
Roughly estimate your scope
Select your sector, headcount band and turnover band. XICTRAQ shows a non-binding indication of whether NIS2 might be relevant for you — as a starting point for the conversation with qualified experts.
Work through and document the measures
Go through the ten measure areas and set a status per item (not started, in progress, implemented, not applicable), a note and an optional evidence link. You maintain third-party services in the supply chain register.
Keep deadlines and export the record
If an incident occurs, log it — the timer calculates 24 h / 72 h / 1 month and reminds you. You can export your entire readiness status as a PDF for internal purposes at any time.
Ten measure areas in the self-assessment
You document your preparation status per area with a status, a note and an evidence link. This creates a traceable self-assessment.
NIS2 readiness is a preparation and documentation aid. It does not constitute legal advice and does not replace a review by qualified experts (e.g. lawyers or your competent authority). Compliance with the NIS2 transposition is not assured. The applicable laws and the requirements of your authority are decisive.
Frequently Asked Questions
Does XICTRAQ make me NIS2 compliant?
How does the scope pre-check work?
Which reporting deadlines does the timer calculate?
Where do the entries in the supply chain register come from?
What does the PDF record contain?
Which plan includes NIS2 readiness?
Data protection and NIS2 interlock: the GDPR check examines trackers, cookie consent and mandatory pages — a sensible complement to your NIS2 preparation.
Many NIS2 measures have a technical side: SSL, security headers and third-party scripts. The security scan provides ongoing evidence for your self-assessment.