Organisation Evaluation
Where you actually stand against NIS2 and IMO, established before anything is promised, and checked again every year.
Almost every conversation about NIS2 or IMO starts in the same place: somebody has been told the rules apply to them, and nobody can say how far off they are. Buying software at that point is guessing.
An evaluation answers it. We go through the organisation the way an assessor would (what is in place, what is written down, what is actually practised, and what would be found if it were tested) and hand back a position, a gap list and what closing each gap takes.
It is deliberately sold on its own. You can take the report to whoever you like, including somebody else; the number in it is what our own quotes are then built from, so nothing about the scope is a surprise later.
Standing still is the failure mode: an assessment is true on the day it is written. The re-evaluation runs the same pass on a schedule, so the position you cite to an auditor, an insurer or a customer is this year's.
Who it is for
Organisations that have been told they are in scope and do not yet know what that costs them.
Risk analysis and the basis of the security policy: knowing the organisation's actual position before controls are chosen.
The platform half of this: BridgeHow it runs
Measured against the actual text
Article by article for NIS2, item by item for IACS UR E26/E27, not a vendor's summary of them.
A gap list with a price on it
Every gap with what closes it, what it costs and how long it takes, so it can be planned rather than panicked over.
Repeated, not remembered
The same pass on a schedule, with the movement since the last one shown rather than described.
Usable as evidence
The written outcome goes straight into the register suite as the assessment record an auditor asks for.
What you end up holding
- A written position against every applicable obligation, with what was examined
- A prioritised gap list, each with an owner, an effort and a cost
- A remediation plan you can execute yourself, with us, or with anyone else
- The same assessment repeated on your chosen cadence, with the movement shown
What it is priced against
The same line items your quote and every invoice after it will carry, at list.
Indicative list prices, and not an offer: what you pay depends on the size of your organisation and what else you take. We confirm the real number in writing.
Add it to a plan in the builderStart with the facts
Tell us roughly how many sites and how many people you have, and we will come back with what this costs and how long it takes.