TechBraga delivers NIS2 Directive and GDPR compliance audits, policy documentation, incident response plans, and ongoing monitoring for EU SMEs. Fixed-price. Free assessment.
The NIS2 Directive is now law in Portugal, Germany, and Austria — affecting 28,700 companies including 6,200 SMEs. Fines for non-compliance can reach €10M or 2% of global turnover.
We handle the complexity so you don't have to: gap analysis, policy documentation, incident response plans, and ongoing compliance monitoring.
The NIS2 Directive (Network and Information Security Directive 2) is an EU regulation that mandates cybersecurity requirements for organisations across 18 critical sectors. It took effect in Portugal, Germany, and Austria in 2024, with fines up to €10M or 2% of global turnover for non-compliance.
NIS2 applies to medium and large organisations (50+ employees or €10M+ turnover) in sectors including energy, transport, health, digital infrastructure, and more. Smaller supply-chain suppliers may also be indirectly affected. We offer a free scoping call to clarify your obligations.
A typical gap analysis and policy documentation engagement takes 4–8 weeks. Implementation of technical controls and staff training may add 2–3 months. Ongoing monitoring is a continuous retainer service.
Yes. Our compliance service covers both NIS2 and GDPR simultaneously — they share substantial overlap in data processing policies, breach notification, and risk management frameworks.
Book a free 30-minute discovery call. We'll assess your situation and recommend exactly what you need — nothing more.