Skip to main content

Preparing for the NIS2 Directive

Technical Readiness Services for the NIS2 Directive

We align your company’s infrastructure and systems with the cybersecurity requirements of the NIS2 Directive. This is a technical implementation service, not legal counsel, allowing you to begin your preparations without waiting for the directive's final transposition into Spanish law.

  • ICT Asset Inventory
  • Technical Risk Analysis
  • Implementation of Measures
  • Supporting Documentation

What does technical preparation for NIS2 involve?

The NIS2 Directive requires affected organisations to adopt a proactive, risk-based approach to managing their cybersecurity. Our service translates these high-level requirements into concrete technical actions for your company's IT infrastructure.

Although the draft bill for transposition in Spain is still pending, the core technical principles are clear. We focus on these to get ahead and reduce future pressure, addressing key areas such as asset inventory, access management, backups, incident response, and business continuity. This is not a certification or legal advice, but a technical support partnership.

Audience

For companies that need to align their technology with NIS2

This service is aimed at organisations likely to be classified as 'essential' or 'important' that need a technology partner to implement the required security measures. It is ideal for:

  • IT Managers who need to apply security controls to their systems.
  • Managers and directors responsible for cybersecurity who lack a specialist technical team.
  • Businesses looking to strengthen their current security posture in line with a European regulatory framework.
  • Organisations needing help to document their architecture and technical measures for future audits.

Scope of Service

A technical action plan based on the pillars of NIS2

We analyse the current state of your infrastructure and help you implement the necessary technical measures to strengthen your cybersecurity, in line with the directive's requirements.

Asset and Risk Management

  • Developing an IT asset inventory.
  • Security risk analysis of critical assets.
  • Proposing a prioritised mitigation plan.

Technical Security Measures

  • Implementing multi-factor authentication (MFA).
  • System patching and update management.
  • Configuring and reviewing backups.
  • Network segmentation and firewall management.
  • Configuring logs for monitoring.

Continuity and Documentation

  • Reviewing business continuity and disaster recovery plans.
  • Support with drafting technical documentation for the implemented measures.

Collaboration

Everyone's role on the path to NIS2 compliance

Preparing for NIS2 is a joint effort. We clearly define responsibilities to ensure the project's success.

Seintec's Role

As your technology partner, we handle the assessment, design, and implementation of the agreed technical solutions. We provide the expertise and execution to configure your systems securely and document the work carried out.

Your Company's Role

Company leadership is responsible for making strategic decisions on the accepted level of risk, investment, and resource allocation. Your involvement is also crucial for defining policies and raising employee awareness.

The Role of Manufacturers

Hardware and software vendors are responsible for providing patches for vulnerabilities discovered in their products. We manage the application of these updates as part of our service.

Why Seintec

A single technical point of contact and full control of your infrastructure

We do not outsource our technical support. The same Seintec team that designs your solution is the one that implements it and handles your requests. With over 15 years of experience, we offer you a single, direct, and expert point of contact.

Furthermore, our own data centre in Sant Miquel de Balenyà (Osona, Barcelona) gives us absolute control over the physical infrastructure where your systems and backups can reside. This capability is a key factor for data sovereignty and security, a fundamental principle in European regulation.

What's Not Included

A Technical Service, Not Legal Counsel

To avoid any misunderstanding, it's important to clarify the scope of our service:

  • We do not offer legal advice on the applicability or interpretation of the NIS2 Directive or its future transposition into Spanish law.
  • We do not classify your company as an 'essential or important entity'; this requires legal consultation.
  • We do not issue compliance certifications for NIS2, the Esquema Nacional de Seguridad (ENS), or ISO 27001.
  • Final responsibility for regulatory compliance always rests with the client company's management.
  • This service does not include cybersecurity awareness training for employees, although we can offer it as a separate project.

Seintec Systems SL, established in 2023, has a technical team with over 15 years of experience in business infrastructure and cybersecurity.

Our Technical Support Process

  1. 01

    1. Initial Diagnosis

    We start with a free initial ICT review to get a general overview. Optionally, we can conduct an in-depth audit for a comprehensive analysis.

  2. 02

    2. Action Plan

    Based on the diagnosis, we create a prioritised technical action plan. We detail the measures to be implemented, along with the scope and objectives of each one.

  3. 03

    3. Implementation of Measures

    Our technical team executes the plan by configuring systems, installing the necessary tools, and applying the defined security policies. We work remotely or arrange on-site visits as agreed.

  4. 04

    4. Documentation and Handover

    Once the implementation is complete, we provide you with supporting documentation detailing the configurations and technical procedures applied, for your internal governance and future reference.

Frequently Asked Questions about NIS2 Readiness

Does it make sense to start if the Spanish law hasn't been passed yet?

Yes. The technical requirements of the European directive form the basis of the future law. Starting now allows you to spread the effort, reduce risks, and avoid a last-minute rush when the final transposition is approved.

Does this service guarantee NIS2 compliance?

No. This service ensures that the agreed technical measures are implemented correctly according to best practices. NIS2 compliance is a broader process involving legal, organisational, and governance aspects, for which your company bears the ultimate responsibility.

What if I already have some security measures in place?

That's great. Our first step is always a review to understand your starting point. We build on what you already have, identify gaps, and propose improvements. The initial ICT review, which is free of charge, is ideal for this first assessment.

Is Seintec certified for ENS or ISO 27001?

No, as a service provider, Seintec is not certified in ENS or ISO 27001. Our service focuses on helping our clients implement the technical controls required by these and other regulations, such as NIS2, within their own systems.

How do I know if my company is affected by the NIS2 Directive?

Determining whether a company is an 'essential or important entity' under NIS2 is an assessment that requires specialist legal advice. Our role begins once you are certain, or have a high probability, that you need to adapt your technology.

Do you offer ongoing support after the initial project?

Yes. The implementation can be a one-off project or part of a managed services or IT support contract, which includes ongoing support for the implemented measures and day-to-day security management.

Next step

Take the first step towards technical readiness

Even though the law's transposition is still pending, the cybersecurity requirements are clear. Start preparing now, without pressure or commitment.