{"id":20346,"date":"2026-06-16T08:54:54","date_gmt":"2026-06-16T08:54:54","guid":{"rendered":"https:\/\/www.tyylidata.fi\/referenssit\/nis2-framework\/"},"modified":"2026-07-08T07:14:33","modified_gmt":"2026-07-08T07:14:33","slug":"nis2-framework","status":"publish","type":"projects","link":"https:\/\/www.tyylidata.fi\/en\/references\/nis2-framework\/","title":{"rendered":"NIS2 Framework"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"20346\" class=\"elementor elementor-20346 elementor-15777\" data-elementor-post-type=\"projects\">\n\t\t\t\t<div class=\"elementor-element elementor-element-c9141d0 e-con-full e-flex e-con e-parent\" data-id=\"c9141d0\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-2229894 e-flex e-con-boxed e-con e-child\" data-id=\"2229894\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-6b24e30 e-con-full e-flex e-con e-child\" data-id=\"6b24e30\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d428ed3 elementor-widget elementor-widget-the7-heading\" data-id=\"d428ed3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"the7-heading-title elementor-size-default\">NIS2 Framework for Cybersecurity Assessment<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-19bfcf4 elementor-widget elementor-widget-text-editor\" data-id=\"19bfcf4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"isSelectedEnd\">In industrial and technical design supply chains, cybersecurity is no longer only an internal IT matter. NIS2, customer requirements and supply chain security expectations require companies to demonstrate how risks are identified, managed and monitored. <\/p><p class=\"isSelectedEnd\">The customer needed a practical model for assessing the current state of cybersecurity regularly, understandably and in a way that supports management decision-making.<\/p><p class=\"isSelectedEnd\">The goal was not to create a heavy audit model, but a clear, repeatable and participatory way of working that makes observations, responsibilities and development actions visible.<\/p><p>The work helped turn regulatory requirements into concrete questions, assessment areas and follow-up actions.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-ab4eaec e-con-full e-flex e-con e-child\" data-id=\"ab4eaec\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3db5ad1 elementor-widget elementor-widget-the7-heading\" data-id=\"3db5ad1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"the7-heading-title elementor-size-default\">Key areas<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f432aac elementor-icon-list--layout-traditional elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"f432aac\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t\t\t\t<ul class=\"elementor-icon-list-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Structuring NIS2 requirements<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Assessing the current state of cybersecurity<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Risk management operating model<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Management responsibilities and follow-up<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Supply chain security<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Staff security awareness<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Continuity and recovery<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-circle\" viewBox=\"0 0 512 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8z\"><\/path><\/svg>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Readiness for audits and customer questionnaires<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-97ce48b elementor-align-left elementor-widget elementor-widget-the7_button_widget\" data-id=\"97ce48b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7_button_widget.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-button-wrapper\"><a href=\"https:\/\/www.tyylidata.fi\/en\/services\/cybersecurity-for-smes\/\" class=\"box-button elementor-button elementor-size-md\">More about cybersecurity<\/a><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-526781a e-flex e-con-boxed e-con e-child\" data-id=\"526781a\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-ec91510 e-con-full e-flex e-con e-child\" data-id=\"ec91510\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ddac24c elementor-widget elementor-widget-the7-heading\" data-id=\"ddac24c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"the7-heading-title elementor-size-default\">What was done<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-dcd26bd e-con-full e-flex e-con e-child\" data-id=\"dcd26bd\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-31eaa7a elementor-widget-tablet__width-inherit elementor-widget elementor-widget-text-editor\" data-id=\"31eaa7a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>The goal was to make cybersecurity a monitored operating model, not a one-off checklist.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-10114a2 elementor-widget elementor-widget-text-editor\" data-id=\"10114a2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"isSelectedEnd\">A structure was defined to help the company assess the state of cybersecurity across different areas and document observations for further development.<\/p><p class=\"isSelectedEnd\">The framework included, among other things:<\/p><ul><li class=\"isSelectedEnd\">assessment of management responsibility and commitment<\/li><li class=\"isSelectedEnd\">identification and assessment of cybersecurity risks<\/li><li class=\"isSelectedEnd\">review of the risk management operating model<\/li><li class=\"isSelectedEnd\">assessment of the effectiveness of security controls<\/li><li class=\"isSelectedEnd\">security principles for communication networks and information systems<\/li><li class=\"isSelectedEnd\">system acquisition, development and vulnerability management<\/li><li class=\"isSelectedEnd\">assessment of supply chain cybersecurity<\/li><li class=\"isSelectedEnd\">asset management and review of critical operations<\/li><li class=\"isSelectedEnd\">personnel security and training<\/li><li class=\"isSelectedEnd\">access management and strong authentication<\/li><li class=\"isSelectedEnd\">incident detection and reporting<\/li><li class=\"isSelectedEnd\">backup, recovery and fallback communication<\/li><li class=\"isSelectedEnd\">physical environment and facility security<\/li><\/ul><p>The model included an assessment scale that allows observations to be compared over time. This turned cybersecurity into a monitored whole instead of a single one-off assessment. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0e9fe7e e-flex e-con-boxed e-con e-child\" data-id=\"0e9fe7e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-a61b29c e-con-full e-flex e-con e-child\" data-id=\"a61b29c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ddef92e elementor-widget elementor-widget-the7-heading\" data-id=\"ddef92e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"the7-heading-title elementor-size-default\">Technical approach<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f1742f1 e-con-full e-flex e-con e-child\" data-id=\"f1742f1\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-7d246ca elementor-widget elementor-widget-text-editor\" data-id=\"7d246ca\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"isSelectedEnd\">The work combined a regulation-driven perspective with the practical operating environment. The model was built to support discussions with management, IT and operational personnel. <\/p><p class=\"isSelectedEnd\">A key principle was that the state of cybersecurity cannot be assessed only through technical settings. Responsibilities, ways of working, training, documentation, incident management and continuous monitoring must also be included. <\/p><p class=\"isSelectedEnd\">The approach was based on three ideas:<\/p><ol><li class=\"isSelectedEnd\">first, understand the current state<\/li><li class=\"isSelectedEnd\">then identify gaps and risks<\/li><li class=\"isSelectedEnd\">finally, define responsible follow-up actions<\/li><\/ol><p>This makes cybersecurity manageable and measurable.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-740f057 e-grid e-con-full e-con e-child\" data-id=\"740f057\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t<div class=\"elementor-element elementor-element-5d3dc5e e-flex e-con-boxed e-con e-child\" data-id=\"5d3dc5e\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-84c4ed5 elementor-align-left elementor-widget elementor-widget-the7_icon_widget\" data-id=\"84c4ed5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7_icon_widget.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"the7-icon-wrapper the7-elementor-widget\"><div class=\"elementor-icon\"><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-clipboard-check\" viewBox=\"0 0 384 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M336 64h-80c0-35.3-28.7-64-64-64s-64 28.7-64 64H48C21.5 64 0 85.5 0 112v352c0 26.5 21.5 48 48 48h288c26.5 0 48-21.5 48-48V112c0-26.5-21.5-48-48-48zM192 40c13.3 0 24 10.7 24 24s-10.7 24-24 24-24-10.7-24-24 10.7-24 24-24zm121.2 231.8l-143 141.8c-4.7 4.7-12.3 4.6-17-.1l-82.6-83.3c-4.7-4.7-4.6-12.3.1-17L99.1 285c4.7-4.7 12.3-4.6 17 .1l46 46.4 106-105.2c4.7-4.7 12.3-4.6 17 .1l28.2 28.4c4.7 4.8 4.6 12.3-.1 17z\"><\/path><\/svg><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1060359 elementor-widget elementor-widget-the7-heading\" data-id=\"1060359\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"the7-heading-title elementor-size-default\">NIS2<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0b6c3b3 elementor-widget elementor-widget-text-editor\" data-id=\"0b6c3b3\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>From requirements to practical actions<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-1de2160 e-flex e-con-boxed e-con e-child\" data-id=\"1de2160\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-49c5c4b elementor-align-left elementor-widget elementor-widget-the7_icon_widget\" data-id=\"49c5c4b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7_icon_widget.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"the7-icon-wrapper the7-elementor-widget\"><div class=\"elementor-icon\"><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eaff1b7 elementor-widget elementor-widget-the7-heading\" data-id=\"eaff1b7\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"the7-heading-title elementor-size-default\">Risk management<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3cb3353 elementor-widget elementor-widget-text-editor\" data-id=\"3cb3353\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Into a monitored whole<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-0faf61b e-flex e-con-boxed e-con e-child\" data-id=\"0faf61b\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4a737ef elementor-align-left elementor-widget elementor-widget-the7_icon_widget\" data-id=\"4a737ef\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7_icon_widget.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"the7-icon-wrapper the7-elementor-widget\"><div class=\"elementor-icon\"><svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fas-user-tie\" viewBox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M224 256c70.7 0 128-57.3 128-128S294.7 0 224 0 96 57.3 96 128s57.3 128 128 128zm95.8 32.6L272 480l-32-136 32-56h-96l32 56-32 136-47.8-191.4C56.9 292 0 350.3 0 422.4V464c0 26.5 21.5 48 48 48h352c26.5 0 48-21.5 48-48v-41.6c0-72.1-56.9-130.4-128.2-133.8z\"><\/path><\/svg><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-52af6a2 elementor-widget elementor-widget-the7-heading\" data-id=\"52af6a2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"the7-heading-title elementor-size-default\">Management<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0ac8b82 elementor-widget elementor-widget-text-editor\" data-id=\"0ac8b82\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Responsibilities made visible<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-3f5ad0c e-flex e-con-boxed e-con e-child\" data-id=\"3f5ad0c\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-831b2d6 elementor-align-left elementor-widget elementor-widget-the7_icon_widget\" data-id=\"831b2d6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7_icon_widget.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"the7-icon-wrapper the7-elementor-widget\"><div class=\"elementor-icon\"><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0efb1f6 elementor-widget elementor-widget-the7-heading\" data-id=\"0efb1f6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"the7-heading-title elementor-size-default\">Follow-up<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b9fb4a6 elementor-widget elementor-widget-text-editor\" data-id=\"b9fb4a6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p data-start=\"222\" data-end=\"257\">Progress made measurable<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f307a33 e-flex e-con-boxed e-con e-child\" data-id=\"f307a33\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t<div class=\"elementor-element elementor-element-2d74778 e-con-full e-flex e-con e-child\" data-id=\"2d74778\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-bbdb14c elementor-widget elementor-widget-the7-heading\" data-id=\"bbdb14c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"the7-heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"the7-heading-title elementor-size-default\">Outcome<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-080a9d3 e-con-full e-flex e-con e-child\" data-id=\"080a9d3\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t<div class=\"elementor-element elementor-element-974b4fe elementor-widget elementor-widget-text-editor\" data-id=\"974b4fe\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"isSelectedEnd\">The project resulted in an implementation model tailored to the customer\u2019s needs. It can be used for regular assessment, management reporting and planning development actions.<\/p><p class=\"isSelectedEnd\">The customer received a practical tool for handling NIS2 and supply chain requirements in a clear and repeatable way. The model helps identify what is already at a good level, what needs improvement and which actions should be prioritised next. <\/p><p>The outcome also supports preparation for audits, customer questionnaires and supplier requirements.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>The NIS2 framework helped transform cybersecurity requirements into a clear, repeatable assessment model supporting risk management, management decision-making and readiness for customer questionnaires.<\/p>\n","protected":false},"featured_media":20328,"template":"","meta":[],"project_category":[152,148,150],"class_list":["post-20346","projects","type-projects","status-publish","has-post-thumbnail","hentry","project_category-customer-cases","project_category-cybersecurity","project_category-technology-strategy"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.2 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>NIS2 Risk and Cybersecurity Assessment | Tyylidata<\/title>\n<meta name=\"description\" content=\"Tyylidata created a practical NIS2 framework for assessing cybersecurity, managing risks, clarifying responsibilities and preparing for audits and customer requirements.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.tyylidata.fi\/en\/references\/nis2-framework\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NIS2 Risk and Cybersecurity Assessment | Tyylidata\" \/>\n<meta property=\"og:description\" content=\"Tyylidata created a practical NIS2 framework for assessing cybersecurity, managing risks, clarifying responsibilities and preparing for audits and customer requirements.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.tyylidata.fi\/en\/references\/nis2-framework\/\" \/>\n<meta property=\"og:site_name\" content=\"Tyylidata\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/tyylidata\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-08T07:14:33+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.tyylidata.fi\/wp-content\/uploads\/2024\/06\/pexels-towfiqu-barbhuiya-3440682-11412596-scaled.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"2560\" \/>\n\t<meta property=\"og:image:height\" content=\"1708\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/references\\\/nis2-framework\\\/\",\"url\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/references\\\/nis2-framework\\\/\",\"name\":\"NIS2 Risk and Cybersecurity Assessment | Tyylidata\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/references\\\/nis2-framework\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/references\\\/nis2-framework\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.tyylidata.fi\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/pexels-towfiqu-barbhuiya-3440682-11412596-scaled.webp\",\"datePublished\":\"2026-06-16T08:54:54+00:00\",\"dateModified\":\"2026-07-08T07:14:33+00:00\",\"description\":\"Tyylidata created a practical NIS2 framework for assessing cybersecurity, managing risks, clarifying responsibilities and preparing for audits and customer requirements.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/references\\\/nis2-framework\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/references\\\/nis2-framework\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/references\\\/nis2-framework\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.tyylidata.fi\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/pexels-towfiqu-barbhuiya-3440682-11412596-scaled.webp\",\"contentUrl\":\"https:\\\/\\\/www.tyylidata.fi\\\/wp-content\\\/uploads\\\/2024\\\/06\\\/pexels-towfiqu-barbhuiya-3440682-11412596-scaled.webp\",\"width\":2560,\"height\":1708,\"caption\":\"Tietoturvakartoitus auttaa tunnistamaan nykytilan, keskeiset riskit ja t\u00e4rkeimm\u00e4t kehityskohteet.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/references\\\/nis2-framework\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Etusivu\",\"item\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Referenssit\",\"item\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/references\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"NIS2 Framework\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/\",\"name\":\"Tyylidata\",\"description\":\"Selke\u00e4mpi\u00e4 teknologiap\u00e4\u00e4t\u00f6ksi\u00e4 yrityksille.\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/#organization\",\"name\":\"Tyylidata\",\"url\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.tyylidata.fi\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Logo_tyyli_25_sq_wt.webp\",\"contentUrl\":\"https:\\\/\\\/www.tyylidata.fi\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Logo_tyyli_25_sq_wt.webp\",\"width\":2014,\"height\":1869,\"caption\":\"Tyylidata\"},\"image\":{\"@id\":\"https:\\\/\\\/www.tyylidata.fi\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/tyylidata\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/tyylidata\\\/\",\"https:\\\/\\\/www.instagram.com\\\/tyylidata\\\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"NIS2 Risk and Cybersecurity Assessment | Tyylidata","description":"Tyylidata created a practical NIS2 framework for assessing cybersecurity, managing risks, clarifying responsibilities and preparing for audits and customer requirements.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.tyylidata.fi\/en\/references\/nis2-framework\/","og_locale":"en_US","og_type":"article","og_title":"NIS2 Risk and Cybersecurity Assessment | Tyylidata","og_description":"Tyylidata created a practical NIS2 framework for assessing cybersecurity, managing risks, clarifying responsibilities and preparing for audits and customer requirements.","og_url":"https:\/\/www.tyylidata.fi\/en\/references\/nis2-framework\/","og_site_name":"Tyylidata","article_publisher":"https:\/\/www.facebook.com\/tyylidata","article_modified_time":"2026-07-08T07:14:33+00:00","og_image":[{"width":2560,"height":1708,"url":"https:\/\/www.tyylidata.fi\/wp-content\/uploads\/2024\/06\/pexels-towfiqu-barbhuiya-3440682-11412596-scaled.webp","type":"image\/webp"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.tyylidata.fi\/en\/references\/nis2-framework\/","url":"https:\/\/www.tyylidata.fi\/en\/references\/nis2-framework\/","name":"NIS2 Risk and Cybersecurity Assessment | Tyylidata","isPartOf":{"@id":"https:\/\/www.tyylidata.fi\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.tyylidata.fi\/en\/references\/nis2-framework\/#primaryimage"},"image":{"@id":"https:\/\/www.tyylidata.fi\/en\/references\/nis2-framework\/#primaryimage"},"thumbnailUrl":"https:\/\/www.tyylidata.fi\/wp-content\/uploads\/2024\/06\/pexels-towfiqu-barbhuiya-3440682-11412596-scaled.webp","datePublished":"2026-06-16T08:54:54+00:00","dateModified":"2026-07-08T07:14:33+00:00","description":"Tyylidata created a practical NIS2 framework for assessing cybersecurity, managing risks, clarifying responsibilities and preparing for audits and customer requirements.","breadcrumb":{"@id":"https:\/\/www.tyylidata.fi\/en\/references\/nis2-framework\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.tyylidata.fi\/en\/references\/nis2-framework\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.tyylidata.fi\/en\/references\/nis2-framework\/#primaryimage","url":"https:\/\/www.tyylidata.fi\/wp-content\/uploads\/2024\/06\/pexels-towfiqu-barbhuiya-3440682-11412596-scaled.webp","contentUrl":"https:\/\/www.tyylidata.fi\/wp-content\/uploads\/2024\/06\/pexels-towfiqu-barbhuiya-3440682-11412596-scaled.webp","width":2560,"height":1708,"caption":"Tietoturvakartoitus auttaa tunnistamaan nykytilan, keskeiset riskit ja t\u00e4rkeimm\u00e4t kehityskohteet."},{"@type":"BreadcrumbList","@id":"https:\/\/www.tyylidata.fi\/en\/references\/nis2-framework\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Etusivu","item":"https:\/\/www.tyylidata.fi\/en\/"},{"@type":"ListItem","position":2,"name":"Referenssit","item":"https:\/\/www.tyylidata.fi\/en\/references\/"},{"@type":"ListItem","position":3,"name":"NIS2 Framework"}]},{"@type":"WebSite","@id":"https:\/\/www.tyylidata.fi\/en\/#website","url":"https:\/\/www.tyylidata.fi\/en\/","name":"Tyylidata","description":"Selke\u00e4mpi\u00e4 teknologiap\u00e4\u00e4t\u00f6ksi\u00e4 yrityksille.","publisher":{"@id":"https:\/\/www.tyylidata.fi\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.tyylidata.fi\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.tyylidata.fi\/en\/#organization","name":"Tyylidata","url":"https:\/\/www.tyylidata.fi\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.tyylidata.fi\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.tyylidata.fi\/wp-content\/uploads\/2026\/06\/Logo_tyyli_25_sq_wt.webp","contentUrl":"https:\/\/www.tyylidata.fi\/wp-content\/uploads\/2026\/06\/Logo_tyyli_25_sq_wt.webp","width":2014,"height":1869,"caption":"Tyylidata"},"image":{"@id":"https:\/\/www.tyylidata.fi\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/tyylidata","https:\/\/www.linkedin.com\/company\/tyylidata\/","https:\/\/www.instagram.com\/tyylidata\/"]}]}},"_links":{"self":[{"href":"https:\/\/www.tyylidata.fi\/en\/wp-json\/wp\/v2\/projects\/20346","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tyylidata.fi\/en\/wp-json\/wp\/v2\/projects"}],"about":[{"href":"https:\/\/www.tyylidata.fi\/en\/wp-json\/wp\/v2\/types\/projects"}],"version-history":[{"count":3,"href":"https:\/\/www.tyylidata.fi\/en\/wp-json\/wp\/v2\/projects\/20346\/revisions"}],"predecessor-version":[{"id":20414,"href":"https:\/\/www.tyylidata.fi\/en\/wp-json\/wp\/v2\/projects\/20346\/revisions\/20414"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.tyylidata.fi\/en\/wp-json\/wp\/v2\/media\/20328"}],"wp:attachment":[{"href":"https:\/\/www.tyylidata.fi\/en\/wp-json\/wp\/v2\/media?parent=20346"}],"wp:term":[{"taxonomy":"project_category","embeddable":true,"href":"https:\/\/www.tyylidata.fi\/en\/wp-json\/wp\/v2\/project_category?post=20346"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}