Member of BISG e. V. · Düsseldorf +49 151 12479963sachverstaendiger@itschulte.deClient login ISMSDEEN

Home / Resilience Readiness Check

ENTRY OFFER · FIXED PRICE

Resilience Readiness Check: in 5 days you know where you stand.

I assess your IT, processes and evidence through an auditor’s eyes, for DORA or NIS2. You receive a clear maturity assessment, a prioritised list of measures and a decision paper for your management.

WHO THE CHECK IS FOR

Does one of these situations sound familiar?

The audit is coming up

The annual audit, supervisory examination or special audit is scheduled, but the evidence is scattered across drives, tickets and people’s heads.

New obligations, unclear gaps

DORA or NIS2 apply, yet nobody can tell management reliably where the company really stands.

Budget needs to be prioritised

There are more construction sites than resources. You need a sequence that closes the biggest risk first.

TWO VARIANTS

Matched to your regulation

DORA Readiness

from €4,900

For credit institutions, insurers, investment firms and financial service providers.

AUDIT AREAS

  • ICT risk management and governance
  • ICT incidents, classification and reporting
  • Digital operational resilience testing
  • ICT third-party risk and Register of Information
  • Business continuity and recovery capability (BCM)
Request DORA Readiness

NIS2 Readiness

from €3,333

For companies within the scope of NIS2 and critical infrastructure operators.

AUDIT AREAS

  • Applicability check and classification
  • Risk management measures, compared with BSI IT-Grundschutz
  • Reporting obligations and incident response
  • Supply chain security
  • Management obligations and training
Request NIS2 Readiness

PROCESS

Five days, one clear result

  1. 1

    Kick-off & documents

    Define the scope, review policies, registers and previous audit reports.

  2. 2

    Interviews

    Talks with IT leadership, ISO, BCM and selected departments.

  3. 3

    Technical sampling

    Check configurations, authorisations, backup and restore evidence.

  4. 4

    Assessment

    Maturity per area, findings by risk, prioritised measures.

  5. 5

    Management presentation

    Results and decision paper for management.

WHAT YOU GET

Results you can present to auditors and management

Maturity assessment

Traceably assessed for each audit area, with reasoning and evidence.

List of findings in auditor format

Finding, risk, missing evidence and recommendation for each item.

Prioritised action plan

What to do within 90 days and within 12 months, with owners.

Management presentation

Decision paper on budget and priorities for management.

WHAT I NEED FROM YOU

Little preparation

  • Existing policies, concepts and registers
  • Latest audit reports and open findings
  • One fixed contact person for the week
  • Time slots for interviews (approx. 60 min each)

AND AFTERWARDS?

You decide how to proceed

Implement it yourself

Your team continues independently with the action plan.

Supported implementation

I support you up to the audit, including the ISMS platform. The check is credited.

External CISO

Ongoing responsibility for information security as a service.

FREQUENTLY ASKED QUESTIONS

Good to know

Does the check replace an audit or an attestation?

No. The check prepares you for audits and identifies gaps. It is not an attestation or certificate.

How do you handle confidential information?

On request, I sign a non-disclosure agreement before the kick-off. I process your documents exclusively on systems in Germany and delete them 90 days after the end of the project.

Can this be done remotely?

Yes. Interviews and sampling can be carried out by video conference. I am happy to give the management presentation on site.

What if we are larger or more complex?

Then we agree on the scope in the initial consultation and you receive a binding fixed-price offer in advance.

ENQUIRY

Request the Readiness Check

I will get back to you within 1 working day with a proposed date for the free initial consultation.