Compliance roadmap

Six steps to demonstrable compliance

A pragmatic sequence security leaders can follow — from confirming scope to maintaining continuous, auditable compliance.

  1. Confirm your scope

    Map your sector and size against Annex I/II to determine if — and as which tier — you are in scope.

  2. Register with the authority

    Provide the required entity details to your national competent authority or CSIRT.

  3. Run a gap assessment

    Benchmark your current controls against the Article 21 measures and prioritise the gaps.

  4. Implement the measures

    Deploy the technical, operational and organisational controls, proportionate to your risk.

  5. Establish incident reporting

    Build the 24h / 72h / one-month workflow, with clear owners, templates and escalation paths.

  6. Govern & maintain

    Train management, review continuously, and keep auditable evidence of compliance.

Start with a snapshot

A quick readiness check shows you where to focus first, before you commit to the roadmap.

Start free assessment →