Predefined NIS2 framework, in layers
A base package built on the Article 21 measures, with NIS2-loven, the energy order (bek. 260), CER and telecoms security activated alongside for the rules that apply to you.
NIS2 readiness Get NIS2-ready without starting from scratch
Most teams already do the security work for ISO 27001. Switch NIS2 on in .legal and see how much of it you've already done, then close the gap on the rules that actually apply to your sector.
Unlimited users • Free onboarding and support • No commitment
.jpeg)
.jpg)
.jpg)
.jpg)
-1.png)
.jpeg)
.jpg)
NIS2 readiness Meridian was 80% of the way to NIS2 before they'd touched it
Anders Krogh is CISO at Meridian Nordic. As an energy company they're an NIS2 essential entity, and they already run an ISO 27001-certified ISMS in .legal with good progress behind them. When NIS2 landed, Anders didn't start a new project. He switched on the NIS2 framework for energy, and .legal showed him he was already about 80% of the way there, purely from the evidence the ISO work had produced. From there it was a matter of seeing the gap and closing it, not building everything again.
-
Turning NIS2 on showed a ~80% head start, straight from the ISO 27001 evidence.
-
One clear view of what NIS2 asks of an energy company, and what's still open.
-
Assets, vendors, risks and policies live in the same platform as the controls.
-
A real status to give the board, in a click, instead of a guess.
NIS2 readiness Start from ISO 27001, see the NIS2 head start
This is how most teams actually work, so it's how .legal works too. The base NIS2 package is built on the Article 21 measures, which line up closely with ISO 27001. Do the security work once, and the platform shows you the NIS2 payoff as you go.
-
NIS2's base controls sit on the same ground as your ISO 27001 controls.
-
A simulated score shows your NIS2 readiness before you even switch it on.
-
The evidence you've already collected for ISO counts towards NIS2 straight away.
NIS2 readiness The directive, plus the rules for your sector
The EU directive is only half the picture. What you actually have to meet is the national and sector rules on top of it, and that's exactly where teams lose the overview.
-
A base package mirrors the NIS2 directive, so it fits broadly across the EU.
-
Activate the rules that apply to you: NIS2-loven, the energy order (bek. 260), CER, telecoms security.
-
See the gap between the directive and the specific requirements for your sector.
NIS2 readiness A clear plan, not just an obligation
Knowing you "have to do NIS2" isn't the same as knowing what to do. The controls give you both the plan and the overview, so the work stops being a vague worry.
-
Every control comes predefined, 1:1 with the standard, so you start from real requirements.
-
Controls drive the plan and the overview: what's done, what's owed, and by whom.
-
No more guessing whether "risk-management measures" means you're actually finished.
NIS2 readiness Map the assets, vendors and risks NIS2 cares about
A big organisation means a lot to keep track of: many assets, many suppliers, a lot of moving parts. NIS2 wants them mapped and assessed, and in .legal that happens next to the controls, not in a separate spreadsheet.
-
Map the critical assets and the suppliers NIS2 brings into scope.
-
Assess the risk of assets, processes and vendors in an actual NIS2 context.
-
Supply-chain security sits beside the controls it feeds, not off in another tool.
NIS2 readiness Give the board a straight answer
Management gets asked about NIS2 too, and they can be held accountable, so the pressure lands on you. It's a lot easier when the status is real and always to hand.
-
Live progress per framework, so "how far are we?" has an actual answer.
-
Show what's done, what's outstanding and who owns it, without a scramble.
-
The same view works for the board and for an auditor.
NIS2 readiness Rails, not the roadmap
.legal stands up the frameworks, the controls and the tools so the whole picture is easy to see and act on. It doesn't decide your compliance for you.
-
You choose whether you're in scope and which rules apply, we don't read the law for you.
-
You map, assess and document; we give the work somewhere to live and a way to reuse it.
-
The score comes from the evidence you actually collect, nothing is compliant by magic.
NIS2 readiness Frameworks this covers
The directive, the national rules, and the ISO work they build on.
-
NIS2
Learn about NIS2A base package on the directive's Article 21 measures, with the Danish national and sector rules (NIS2-loven, the energy order, CER, telecoms security) activated alongside.
-
ISO 27001
Learn about ISO 27001The Annex A controls the base NIS2 package builds on, predefined and mapped to the same evidence, so the ISO work you've done shows up as NIS2 readiness.
Our Customers
+400
companies
+10.000
users
+79.000
contracts
+14.000
processing activities
.legal's team has consistently demonstrated a commitment to innovation while being responsive to the needs of our mutual clients.
With .legal, we've gained a simpler and more manageable solution that better suits our needs
.legal has been the right choice for us. .legal are professional and welcoming with skilled employees.
Firstly, it means that not all the work is in one place (me), and secondly, that the understanding of GDPR is implemented throughout the organisation.
From .legal, we experience an incredibly high degree of flexibility and willingness to adapt features to our local needs.
.legal's team has consistently demonstrated a commitment to innovation while being responsive to the needs of our mutual clients.
With .legal, we've gained a simpler and more manageable solution that better suits our needs
.legal has been the right choice for us. .legal are professional and welcoming with skilled employees.
Firstly, it means that not all the work is in one place (me), and secondly, that the understanding of GDPR is implemented throughout the organisation.
From .legal, we experience an incredibly high degree of flexibility and willingness to adapt features to our local needs.
We are satisfied with the switch to .legal – it has strengthened our compliance work, made processes easier to manage and more transparent, and improved cross-team collaboration
It just works! It is so easy and user-friendly, and the overview of processing activities is brilliant.
.legal has really understood what it means to create a user-friendly and efficient solution. Privacy is an attractive product compared to price and functionality.
.legal continuously update the platform to ensure their customers always remain compliant. In our view, any other choice would be a downgrade.
The implementation of .legal has made a difference in the way we handle compliance. The system has created structure and overview, which has had concrete benefits.
We are satisfied with the switch to .legal – it has strengthened our compliance work, made processes easier to manage and more transparent, and improved cross-team collaboration
It just works! It is so easy and user-friendly, and the overview of processing activities is brilliant.
.legal has really understood what it means to create a user-friendly and efficient solution. Privacy is an attractive product compared to price and functionality.
.legal continuously update the platform to ensure their customers always remain compliant. In our view, any other choice would be a downgrade.
The implementation of .legal has made a difference in the way we handle compliance. The system has created structure and overview, which has had concrete benefits.
