Athereon GRC

Your Guide to `NIS2 Implementation`: NIS2 Implementation Act and Who is Affected.

Learn everything you need to know about the new NIS2 directive: who is affected, what are the requirements, and how to achieve NIS2 compliance for your organization.
With free checklists and further information on quick wins and long-term compliance available to download.
Developed in Germany
Ready for NIS2
Hosted in Germany

Over 100+ Trust Our GRC Solutions

Your road to `NIS2 Compliance`

With our own ISO 27001-certified information security management system.

a blue gear with black text
member of bitkom logo
NIS2 tools
See downloads
Questions? Feel free to ask.
Regulation

1. NIS2—who is affected?

NIS2 Directive affects significantly more companies than its predecessor, NIS, from critical infrastructures to numerous service providers. But who exactly is affected by the tightened directive, and what obligations does it impose on so-called important and essential entities?
Athereon GRC provides guidance: Our resources allow you to conduct an initial assessment. We also guide you step-by-step through the NIS2 risk analysis and provide valuable tips for preparing for new GRC processes. You'll also receive recommendations for trusted sources for further information.
This will give you confidence and enable you to make informed decisions about the next steps that are relevant for your organization.

Our downloads and links for you:

service gradient
Regulation

1. NIS2—who is affected?

NIS2 Directive affects significantly more companies than its predecessor, NIS, from critical infrastructures to numerous service providers. But who exactly is affected by the tightened directive, and what obligations does it impose on so-called important and essential entities?
Athereon GRC provides guidance: Our resources allow you to conduct an initial assessment. We also guide you step-by-step through the NIS2 risk analysis and provide valuable tips for preparing for new GRC processes. You'll also receive recommendations for trusted sources for further information.
This will give you confidence and enable you to make informed decisions about the next steps that are relevant for your organization.

Our downloads and links for you:

service gradient
service gradient
Requirements

2. How to meet requirements?

NIS2 requirements are complex, but not impossible to meet. We help you systematically plan and implement technical, organizational, and procedural measures. Our GRC software offers a centralized overview of risks, compliance requirements, and documentation obligations.
Our practical resources make implementation easier.

Our resources for you:

Achieve compliance

3. Ready for NIS2?

NIS2 compliance is not a one-time project, but an ongoing process. With Athereon GRC, you lay the foundation for long-term security and compliance – scalable, transparent, and audit-proof. Our experts share best practices, industry-specific expertise, and practical quick wins so you can get started right away.
Our consultants will also be happy to personally accompany you every step of the way on your journey to NIS2 compliance.

Our downloads for you:

service gradient
Regulation

3. Ready for NIS2?

NIS2 compliance is not a one-time project, but an ongoing process. With Athereon GRC, you lay the foundation for long-term security and compliance – scalable, transparent, and audit-proof. Our experts share best practices, industry-specific expertise, and practical quick wins so you can get started right away.
Our consultants will also be happy to personally accompany you every step of the way on your journey to NIS2 compliance.

Our downloads for you:

service gradient

NIS2 readiness

30 questions to determine your NIS2 readiness score.

Your `NIS2 Resources` from Athereon GRC

Everything you'll need on your road to NIS2.

a clipboard with a check mark on it

Checklist: Self-test for companies

With our ten-part checklist, you can get an initial assessment of whether your organization is affected by NIS2 in just a few minutes. The first step on your road to NIS2 compliance is to establish clarity.

automated workflows

Risk analysis according to NIS2

This step-by-step guide will walk you through creating a systematic risk analysis according to NIS2. This risk analysis forms the central foundation of NIS2 and enables you to identify threats and vulnerabilities, assess impacts, and implement appropriate protective measures.

Quick wins: Start today

Time is pressing, but not everything has to be perfect right away. In this one-pager, learn which specific steps you can take today to make decisive progress on your road to NIS2 compliance. We reveal practical quick wins that you can start implementing right away.

a light bulb that is on a white background

Whitepaper: Ready for NIS2

Looking for in-depth insider knowledge on NIS2? In this whitepaper, we share a classification of NIS2 requirements, strategic approaches, practical examples from our experience, and proven best practices as well as recommended actions. Make sure you're ready for the new NIS2 directive—and will be in the future.

Why Leading Companies Prefer Our NIS2 Software

Organizations relying on our technology.

"By using Athereon GRC, we were able to link the requirements of the various standards (ISO 27001, ISO 27017, ISO 27018, BSI C5, ISO 27701) and thus process them in just one place. The effort required to maintain the respective requirements of these standards and norms and the complexity that normally accompanies them have been significantly reduced through the use of Athereon GRC. I would like to highlight two points in particular: 1) Open communication regarding customer requests and feature requests at all times. These are usually implemented very promptly. 2) The always fast and competent support from the support team. Many thanks to the Athereon GRC team for the collaboration!"

Torsten Zinke
Information Security (ISB) & Compliance Manager

NIS2 implementation

We help you ensure security for time-critical processes. Conduct an impact assessment now.

NIS2-Umsetzungsgesetz meistern mit Athereon GRC

Smart functionalities, precisely tailored to all NIS2 requirements.

Asset Management

NIS2 requirement
Systematic identification and management of critical assets to ensure integrity and availability.
Athereon GRC
Recodring of values and setting in hierarchical dependencies; import from EAM or asset management system.

Compliance Management

NIS2 requirement
Evidence of compliance with appropriate security measures, regular audits and ongoing monitoring.
Athereon GRC
Modular and editorially prepared standard management for documenting implementation processes.

Action Management

NIS2 requirement
Implementation, monitoring and improvement of appropriate security measures.
Athereon GRC
Integrated management of actions and controls in GRC to ensure consistent compliance.

Risk Management

NIS2 requirement
Continuous identification, assessment and minimization of risks to essential and important facilities.
Athereon GRC
Automated risk management with real-time assessment and display of gross and net risks.

Document Management

NIS2 requirement
Documentation and compliance with comprehensive security strategy.
Athereon GRC
Development of audit-proof ISMS documentation and management of the governance body.

Audit Management

NIS2 requirement
Regular evaluation and optimization of security precautions and initiation of appropriate measures.
Athereon GRC
Automatic planning of audits and procedures for internal audits similar to external auditors.

Customer's `Success Stories`

Learn how we simplify compliance for businesses like yours.

We particularly value the way in which requirements are discussed and implemented in a competent, open, critical, and solution-oriented manner. In our experience, this is not something to be taken for granted.

A man
Olaf Reimann
Head of Enterprise Architecture and Cyber Security Governance
Read story

Our collaboration with Athereon GRC was a complete success. The team's high level of expertise and outstanding support helped us progress and achieve success in the TISAX® assessment. The implemented software includes numerous features and an intuitive user interface that meets all our requirements to our complete satisfaction. Athereon GRC facilitates our tasks efficiently and reliably at all our locations.

Thorsten Kohlstock
IT Manager
Read story

"With Athereon GRC, we overcame the challenges of TISAX® certification. The software's ease of use and comprehensive functionality helped us meet all requirements efficiently and in a coordinated manner across our various locations. The support we received from Athereon GRC was outstanding and helped us successfully complete the project."

Christian Kaiser
Head of IT Consulting
Read story
Construction Line

For Bayard, we made exactly the right decision by selecting Athereon GRC for our initial certification. The cockpit is particularly user-friendly; you always have a complete overview of all ISO requirements and processes and know exactly where you are. The software itself always covers the latest regulatory requirements, so you are well prepared for audits. Help from the team was also always reliable, competent, and unbureaucratic. We particularly appreciated the personal support and the straightforward, solution-oriented approach for our company.

A woman
Inga Kramer
Lead HR & Projects
Read story

"By using Athereon GRC, we were able to link the requirements of the various standards (ISO 27001, ISO 27017, ISO 27018, BSI C5, ISO 27701) and thus process them in just one place.

The effort required to maintain the respective requirements of these standards and norms and the complexity that normally accompanies them have been significantly reduced through the use of Athereon GRC.

I would like to highlight two points in particular:

1) Open communication regarding customer requests and feature requests at all times. These are usually implemented very promptly.

2) The always fast and competent support from the support team.

Many thanks to the Athereon GRC team for the collaboration!

A man
Torsten Zinke
Information Security (ISB) & Compliance Manager
Read story
People working together in a co-working space

"The implementation of the ISMS according to BSI IT-Grundschutz with Athereon GRC has exceeded our expectations. Centralized management and control gave us a comprehensive overview of the security status and compliance with regulations. The real-time monitoring of GRC activities and the adaptation to legal requirements proved particularly helpful. Overall, Athereon GRC has helped us improve our security standards and effectively manage risks."

A man
Matthias Totzauer
Group Chief Information Security Officer - CISO
Read story
Construction Sites

For Bayard, we made exactly the right decision by selecting Athereon GRC for our initial certification. The cockpit is particularly user-friendly; you always have a complete overview of all ISO requirements and processes and know exactly where you are. The software itself always covers the latest regulatory requirements, so you are well prepared for audits. Help from the team was also always reliable, competent, and unbureaucratic. We particularly appreciated the personal support and the straightforward, solution-oriented approach for our company.

A woman
Inga Kramer
Lead HR & Projects
Read story
People that are planning something

Collaboration with Athereon GRC was very straightforward, both during project implementation and ongoing use. There was always a competent contact person. Any issues that arose were resolved promptly after reporting, and questions about specific Athereon GRC features were always answered quickly. Furthermore, ideas for new features or suggestions for improvements are received with great interest and then published in a future release.

We've come to value the unbureaucratic, customer-focused collaboration as our greatest advantage and strength, something we sometimes miss with other providers. We also particularly like the videos on Athereon GRC that have been published recently.

Athereon GRC can definitely be recommended for public sector administrations of our size.

Gunnar Herbst
Information Security Officer
Read story
IT Room

Collaboration with Athereon GRC was very straightforward, both during project implementation and ongoing use. There was always a competent contact person. Any issues that arose were resolved promptly after reporting, and questions about specific Athereon GRC features were always answered quickly. Furthermore, ideas for new features or suggestions for improvements are received with great interest and then published in a future release.

We've come to value the unbureaucratic, customer-focused collaboration as our greatest advantage and strength, something we sometimes miss with other providers. We also particularly like the videos on Athereon GRC that have been published recently.

Athereon GRC can definitely be recommended for public sector administrations of our size.

Gunnar Herbst
Information Security Officer
Read story
People with buildings in the background
Fast and easy onboarding

`3 Steps` to Your NIS2 Software

Your digital transformation can be this fast.

a man riding a wave on top of a surfboard

1. Noncommittal NIS2 consultation

Experience the difference of excellent customer support, tailored to your individual requirements. We're always there for you, offering exciting insights into implementation and in-depth insights into our software.

a man riding a wave on top of a surfboard

2. Free demo account

After an initial consultation, we would be happy to set up a demo version of our software for you, allowing you to click around independently and experience the benefits of Athereon GRC in practice and at your leisure.

a man riding a wave on top of a surfboard

3. Efficient implementation

With our comprehensive range of services covering onboarding, migration, and customization, you'll be ready to implement your GRC processes digitally with Athereon GRC in just a few weeks. A dedicated, expert onboarding manager is available to assist you at all times.

Start your GRC transformation

We are happy to support you on your journey.

These Organizations Take `no Risks`

Our software in use by customers.

a group of people looking at a laptop

FAQs

Get detailed answers to the most frequently asked questions.

What is the NIS2 Directive?

The second version of the Network and Information Security Directive, or NIS2 for short, aims to strengthen the cyber resilience of critical and important infrastructures in both the public and private sectors within the EU. More specifically, the updated directive includes stricter measures and reporting obligations for IT security incidents for numerous companies.

When will the NIS2 implementation law come into force in Germany?

Since October 17, 2024, the EU-wide obligation for member states to implement the new NIS 2 Directive through national law has been in effect. Due to the coalition collapse in November 2024, legal implementation in Germany has been delayed. A specific date for the entry into force of a corresponding law in Germany is currently unknown, but is expected soon.

Who is affected by NIS2?

The new directive affects significantly more industries and companies than the first EU directive on network and information security. Companies are also responsible for independently determining whether they are affected by NIS2.

The majority are medium-sized and large companies. You can find out exactly which industries are affected and which of the two new categories they belong to in our blog post on NIS2. The BSI (Federal Office for Information Security) also offers a practical assessment with questions to help you find out if you are affected and if so, to further classify your company.

What are the new NIS2 requirements?

Important additions to NIS2 include severe penalties for violations and the stricter deadlines and requirements for reporting IT security incidents. Three time frames have been established, within which there are specific documentation requirements.

You can find out exactly what needs to be done in the event of an IT security incident and how much time your company has to do so in our blog post on NIS2.

a woman shaking hands with another woman

Make it to the top in compliance

Finally ensure smooth processes and regulatory clarity in all areas of your company.

`News` from Athereon GRC

Learn from others' best practices or simply stay up to date.

Whitepapers

Our whitepapers offer a selection of informative documents addressing the latest developments and challenges in GRC. Download our whitepapers to gain valuable insights and stay up to date.

Blog

On our blog, you'll always find the latest articles on relevant guidelines, legal changes, and current developments in compliance. We also offer interesting insights into our company.

Webinars

Our webinars offer regular training sessions on general compliance topics, regulatory updates, and updates to our software. Always relevant, always up-to-date.

webinar