{"product_id":"nis-2-iso-iec-27001-2022-integrated-management-system","title":"NIS 2 \u0026 ISO\/IEC 27001:2022 Integrated Management System","description":"\u003cp\u003e\u003cem\u003eOne editable document set that runs an ISO\/IEC 27001:2022 information security management system and meets NIS 2 cybersecurity obligations at the same time.\u003c\/em\u003e\u003c\/p\u003e\n\u003ch2\u003eOverview\u003c\/h2\u003e\n\u003cp\u003eMany organisations caught by NIS 2 already run, or plan, an ISO\/IEC 27001 ISMS. This system joins the two: one governance structure, one risk process, one Statement of Applicability, and evidence that serves both the supervisory authority and an ISO\/IEC 27001 audit.\u003c\/p\u003e\n\u003cp\u003eIt opens with NIS 2 applicability and a regulatory profile. Every Annex point of Commission Implementing Regulation (EU) 2024\/2690 is mapped to an owner, documents and evidence, with an applicability check before any of it is treated as binding. A NIS 2-to-ISO\/IEC 27001 Annex A matrix shows where ISMS controls support NIS 2 measures, as an aid and not an equivalence. Organisations that already hold ISO\/IEC 27001 certification can take a fast track: map existing documents and add the NIS 2 legal evidence.\u003c\/p\u003e\n\u003cp\u003eDirective (EU) 2022\/2555 is applied through national transposition law, with a national transposition matrix. ISO\/IEC 27001:2022 clauses and Annex A controls are cited by number and identifier, with ISO\/IEC 27002:2022 for control titles, and the control text is left to your own licensed copy. ENISA Technical Implementation Guidance of June 2025 supplies non-binding evidence examples. AGS is independent and is not affiliated with the European Commission, ENISA or any national authority. Regulations are referenced by citation. Standards are referenced by number and title only, and no standard text is included.\u003c\/p\u003e\n\u003ch2\u003eWhat this system covers\u003c\/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eStart here:\u003c\/strong\u003e a user guide, scope statement and mapping matrices from NIS 2 articles to documents and evidence.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eNIS 2 applicability:\u003c\/strong\u003e an applicability procedure, classification, jurisdiction, registration and a regulatory contact register.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eIntegrated governance:\u003c\/strong\u003e a governance manual, top-level policy, steering committee terms of reference, a management-body training programme and a legal and regulatory compliance procedure.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eISMS context and risk:\u003c\/strong\u003e scope, interested parties, a climate change context assessment, risk methodology, a risk register and a Statement of Applicability covering every Annex A control.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eControls and operations:\u003c\/strong\u003e control policies, suppliers, incident reporting, continuity, vulnerabilities, HR and training.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eAudit and findings:\u003c\/strong\u003e NIS 2, Regulation (EU) 2024\/2690 and ISO\/IEC 27001 audit checklists, corrective action, a regulatory finding response plan for supervisory requests and inspections, and an ISO\/IEC 27001 certification roadmap. The certification decision rests with your chosen certification body.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eWorked examples\u003c\/strong\u003e using fictional organisations: a cloud provider, a managed service provider, a medium essential entity, a medium important entity and an organisation outside Regulation (EU) 2024\/2690.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003ch2\u003eWho it's for\u003c\/h2\u003e\n\u003cp\u003eEssential and important entities under NIS 2, the relevant entities under Regulation (EU) 2024\/2690, and organisations preparing for ISO\/IEC 27001 certification. It suits the information security and compliance leads who run it and the consultants who support them.\u003c\/p\u003e\n\u003cp\u003eIf you need NIS 2 without a full ISMS, the NIS 2 Directive Cybersecurity Management System covers it. If you need an ISMS without NIS 2, see the ISMS ISO\/IEC 27001:2022 toolkit.\u003c\/p\u003e","brand":"Apex Global Solutions AGS","offers":[{"title":"Default Title","offer_id":57395131122004,"sku":"AGS-20-007","price":950.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/1052\/4996\/4372\/files\/AGS-20-007.png?v=1790973809","url":"https:\/\/agskits.com\/products\/nis-2-iso-iec-27001-2022-integrated-management-system","provider":"Apex Global Solutions","version":"1.0","type":"link"}