The entire audit-ready programme. Nothing left to write.
All 23 documents: everything in Professional plus backup, cryptography and vulnerability policies, asset management with register, board resolution, board reporting deck and internal audit checklist. Everything NIS2 actually requires. Nothing you will never open.
€449 · one-time payment · 23 documents
Who this is for
Essential entities under proactive supervision. Compliance leads who answer to a board. MSPs and groups rolling one baseline out across many organisations. Anyone whose next question is not “how do we start?” but “can we prove all of it?”
The three foundations, at full depth
Process Excel
The master workbook at full depth: every measure linked to its owner, its status, its policy and its evidence. When an auditor picks a random control, you find the document trail in one click, in one file.
Annual wheel + risk
The complete cycle: risk assessment, training, exercises, supplier reviews, management reporting and internal audit, all scheduled and connected. This is what survives staff changes and year two.
Policies & documents
Everything. Full policy library and procedures, the registers and evidence templates auditors request, board reporting templates for Article 20 accountability, and an internal audit toolkit to test yourself first.
What you can show after week one
- A documented answer for every measure, every register and every evidence request
- Board reporting that proves management approval, the Article 20 requirement with personal liability attached
- An internal audit plan, so the first audit you fail is your own, in private
- One system connecting policy to plan to proof, in files you own
Article 20 makes management personally accountable. Complete is the package that documents they met it.
What's in the box
23 editable documents in Word, Excel and PowerPoint, grouped under the three foundations.
The complete table of contents, 23 documents in editable Word, Excel and PowerPoint files, delivered on a private download page with free minor updates to this edition.
Guides
- Understanding NIS2Word
- NIS2 Implementation GuideWord
Process & Planning
- NIS2 Process MappingExcel
- NIS2 Annual WheelExcel
- NIS2 Risk & Gap AnalysisExcel
Core Policy
- IT Security Policy — NIS2 FoundationWord + PDF
Risk & Policies
- Risk Management ProcedureWord
- Access Control PolicyWord
- Supplier & Third-Party Security PolicyWord
- Business Continuity & Disaster Recovery PlanWord
Incident Management
- Incident Response PlanWord
- Incident Notification & Reporting FormsWord
- Incident LogExcel
Training & Awareness
- Security Awareness Training PolicyWord
- Training TrackerExcel
Extended Policies & Standards
- Backup PolicyWord
- Cryptography StandardWord
- Vulnerability & Secure Development PolicyWord
Asset Management
- Asset Management ProcedureWord
- Asset RegisterExcel
Governance & Audit
- Board Resolution & Management ApprovalWord
- NIS2 Board Reporting DeckPowerPoint
- Internal Audit ChecklistWord + PDF
Where this package sits
| Package | Starter | Professional | Complete€449 |
|---|---|---|---|
| Documents | 6 | 15 | 23 |
| Process workbook | Core measures | Full measure set | Full set + evidence links |
| Annual wheel + risk | Yes | Extended, with exercises | Full audit cycle |
| Policy library | Core policies | Complete library | Complete + procedures & registers |
| Incident reporting pack | |||
| Supplier security set | |||
| Board reporting & internal audit |
Already bought a smaller package? Contact us and what you paid is deducted in full. You never pay twice.
Why not just hire a consultant?
A consultant builds this for you over months, bills accordingly, and leaves with the know-how. Complete gives you the same document set today, in editable files you own outright, for less than the cost of a consultant's first day. Spend your budget on implementing, not on writing.
Questions
- Is 23 documents overkill for us?
- We deliberately sell exactly what NIS2 requires, nothing more: everything NIS2 actually requires, nothing you will never open. If you are an important entity with no supervisory pressure, Professional may be all you need, and it fully counts toward Complete if that changes. If you are an essential entity, expect proactive supervision: the registers, board reporting and audit checklist in Complete are exactly what those reviews ask for.
- Does Complete cover board and management obligations?
- Yes. Article 20 makes management personally accountable for approving and overseeing the measures. Complete includes the board reporting templates and approval records that document exactly that.
- We manage compliance for multiple client organisations. Does Complete work as a baseline?
- Yes, this is the package MSPs use. Standard Word and Excel, no per-seat licensing, one baseline adapted per client. Contact us for group or MSP use and we will confirm the terms for your setup.
- What about updates when the directive or national rules change?
- Minor updates to this edition are free.
The full licence wording — including use across client organisations — is set out in our terms of sale.
“We roll the baseline out across eleven client organisations — no licence games, no per-seat pricing.”
Jonas HovlandFounder, managed service provider · NorwayBe the organisation the audit goes quickly for.
€449, once. Everything written. Everything yours. Everything deductible from what you paid.