You probably already follow the processes NIS2 requires, such as patching, access control, and incident response. The problem pops up when a supervisory authority asks for proof. Can you provide documentation showing that these things are documented, applied consistently, and kept current? 

The biggest documentation gap is often patching. Attackers most often get in by exploiting vulnerabilities, but only 26% of vulnerabilities are ever fully fixed. 

Turn NIS2 Requirements Into Action is a self-assessment that covers what NIS2 requires, what “documented and in place” looks like for each requirement, and how NinjaOne supports you through strengthening your organization’s cybersecurity posture.