A 30-minute presentation for board members, CEOs, advisory board members, and supervisory board members. Why your company may be affected even though NIS2 does not directly regulate it. This is not a technical presentation, but rather a leadership issue.
It's not your industry that matters. It's your customers' industry.
NIS2 directly regulates approximately 30,000 companies. Through contracts, the requirements are passed on to approximately 300,000 suppliers who are indirectly affected. Failure to provide the required documentation may result in disqualification from tenders.
18
regulated industries
~30,000
Directly regulated companies
~300,000
suppliers indirectly affected
What matters is not your industry, but your customers’ industry and the nature of your integration into their processes and systems (Sattler 2026, Chapter 1.2.3).
Procedure
What to Expect in 30 Minutes
Six concise modules, ranging from the domino effect to an invitation to the in-depth kick-off workshop.
Min. 0 to 3
Arrival and General Information
Why NIS2 is a leadership issue, not just an IT task.
At least 3 to 10
The Domino Effect
How requirements are passed down from regulated major customers to suppliers through contracts.
10 a.m. to 4 p.m.
The Economic Reality
Extent of damage, market dynamics, and the timeline from 2025 to 2028.
Min. 16 to 22
A Top Priority and an Opportunity
Management responsibilities that cannot be delegated and the competitive advantage gained through timing.
Min. 22 to 26
Self-Test
Four Key Questions: Are You Affected?
Min. 22 to 26
Invitation and Outlook
A preview of the one-day NIS2 kick-off workshop and your next steps.
Self-Test
Are you affected? Four key questions.
An abridged excerpt from the structured impact assessment conducted during the kick-off workshop.
01
Customer Page
Do you have customers in any of the 18 regulated industries, and does any one of them account for more than 20 percent of your annual revenue?
02
IT Integration
Do you have technical integrations such as VPN access or API interfaces to customer systems?
03
Criticality
Would your downtime significantly disrupt your customer’s operations?
04
Contractual Signals
Has a customer already asked about your security measures or requested an audit?
Anyone who answers “yes” to at least one or more of these points is highly likely to be affected and should take action promptly (Sattler 2026, Chapters 1.2.3.1 through 1.2.3.5).
From Necessity to Opportunity
Taking action early pays off in measurable ways
Two cases documented in the book illustrate the competitive advantage gained through early compliance.
€420,000
IT Service Provider · 85 Employees
Additional annual revenue from three new clients in the healthcare sector within six months of early certification.
€1.8 million
01
Lorem ipsum dolor sit amet, consectetur adipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.
12 to 18
Months of lead time
Typical timeframe from the initial assessment to being ready for an audit, even with external support. Timing determines the scope for flexibility.