One day · In-person or online · For management and subject matter experts
Are we affected? Where do we stand? What should we do right away?
The kick-off brings together senior management and operational staff. Over the course of one day, you’ll address the three key questions and leave with a list of tasks designed to prepare you specifically for the implementation workshop.
What to Bring
Five results in one day
The kick-off remains pragmatic. Small steps are better than perfect plans that never get implemented.
01
Assess the impact
Structured assessment based on four sets of questions for each customer relationship.
02
Assess Maturity Level
An honest self-assessment across seven security areas.
03
Clarify Responsibilities
The minimal organizational structure and management responsibilities that cannot be delegated.
04
Initiate Quick Wins
The first immediate actions, including the person in charge and the deadline.
05
Hand out homework
Mandatory checklist for preparing for the setup workshop.
06
Book as a basis
The companion book serves as a common thread throughout all the modules of the day.
Procedure
Your Day at a Glance
Six modules, ranging from the impact assessment to the handover of the homework list.
9:00 a.m. to 9:30 a.m.
Arrival, Goals, Rules of the Game
A shared understanding of the process and the outcome.
9:30 a.m. to 10:45 a.m.
Conduct a Structured Assessment of the Impact
Four sets of questions and an assessment of how much this affects you.
11:00 a.m. to 12:15 p.m.
Current Situation and a Top Priority
Five Typical Profiles and Management Responsibilities.
1:15 p.m. to 2:45 p.m.
Assessment of Current Status with Self-Evaluation
Your level of maturity across seven areas.
3:00 p.m. to 4:15 p.m.
Understanding and Initiating Quick Wins
Ten Immediate Measures and the First Binding Steps.
4:15 p.m. to 5:00 p.m.
Homework List and Handover
The Bridge to the Building Workshop.
The Basis for Their Work
The Guide to Assessing Your Current Situation
In the kick-off workshop, we’ll work together to determine where your company stands. The practical guide provides the framework for this: the seven core areas that form the basis of any thorough assessment.
Successfully Implement NIS2 in Small and Medium-Sized Businesses!
A practical guide for board members, CEOs, advisory board members, supervisory board members, and interested decision-makers. From legal obligations to ensuring compliance with your major client’s requirements!
A one-day workshop provides clarity on the current situation. The book delves deeper into the underlying concepts: It demystifies ISO/IEC 27001, penetration tests, and the other terms that appear in supplier requirements. This way, you’ll go into the workshop prepared and get more out of it afterward.
Particularly valuable for assessing your current situation: an honest look at the typical IT reality in small and medium-sized businesses. It has evolved organically, not been planned. This is exactly where the workshop comes in, and the book will guide you through your next steps.
- ISO/IEC 27001, Penetration Tests, and More: Demystified
- Governance in Small and Medium-Sized Businesses: Pragmatic, Not Bureaucratic
- The Most Common Misjudgments and How to Avoid Them
Dr. Claus Michael Sattler · ISBN 978-3-69250-027-0 · April 2026
Quick Wins
Ten Steps to Get Started Right Away
Low-effort, high-impact actions you can start right away.
- Multi-factor authentication for external access
- Backup According to the 3-2-1 Rule
- Patch Management
- Reduce Administrator Privileges
- Identify Critical Systems
- Network Segmentation
- Endpoint Protection
- Emergency Plan
- Awareness Training
- Logging
Quick wins within 30 days are achievable and have an immediate impact (Sattler 2026, Chapters 5.2, 10.1.6).
Why now?
Those who act early help shape the future
Those who start late end up reacting under pressure and risk losing contracts due to a lack of documentation.
3 Questions
Goal for the Day
Are we affected? Where do we stand? What should we do right away? All answered in a single day.
7 Areas
Assessment of the Current Situation
An honest self-assessment with a clear analysis and the three most pressing gaps.
12 to 18
Months of lead time
From the initial assessment to certification readiness. Those who start early have time to build their system systematically.