Does your Microsoft 365 meet NIS2?
A technical check of your real M365 environment against NIS2 requirements — from the inside, read-only, with no consultant on site. Within a few business days you know exactly where you fall short and what to do about it. A summary with priorities, plus a 90-minute walkthrough with an expert. Not sure what the law actually requires? NIS2 and the deadlines in plain IT language.
of the app registration.
This is not a penetration test. It's a compliance check of your M365 against NIS2 — we're inside with your permission and we change nothing in your environment.
-
Read-only. Global Reader.The app gets read-only permissions only, for the duration of the audit. We change nothing in the tenant — we only read the configuration.
-
NDA first, qualified signature.Confidentiality confirmed before we touch your environment. You see the NDA template up front and sign with your own certificate.
-
Money-back guarantee.If the audit doesn't happen or we fail to deliver the report, we refund CZK 14,900. You don't buy blind.
Inside with your permission. Read-only. No surprises.
200+ companies. In business since 2004.
Owners of ICT-GROUP
(since 2004)
in CZ and SK
of cooperation
(24 ratings)
A consulting GAP analysis costs tens of thousands and takes weeks. This is different.
Free calculators only tell you whether NIS2 applies to you. They never look inside your environment. We do.
- ✕ A consulting GAP analysis — weeks of waiting and meetings.
- ✕ Free calculators only tell you the legal classification, not the technical state.
- ✕ Nobody actually looks into your real M365 environment.
- ✓ A technical check of your real M365 tenant against the NIS2 baseline.
- ✓ Results within 2 business days + a summary with priorities.
- ✓ 90 min walkthrough with an expert and a money-back guarantee.
Not just a tool export. An audit with priorities you understand.
The technical report is generated automatically from your tenant. What turns it into an audit is the summary and the walkthrough — so you know what to fix first.
Technical report
A complete technical output of your M365 state against the NIS2 baseline. In English (the tool's output) — we say so openly.
Management summary (in Czech)
A prioritized remediation plan in Czech — what's critical, what can wait, where to start. Readable for management, not just for IT.
90 min consultation
A slot with a consultant within 3 business days. We go through the whole report, the priorities and what to do first — included.
From order to report in a few steps
Pay and pick a date
Payment via Stripe. Right after, you pick the date on which we sign the NDA and start the app registration.
Sign the NDA
A mutual NDA with a template, signed with a qualified electronic signature (your I.CA / PostSignum / eIdentity certificate). No clickwrap.
App registration + audit
You sign in with a Global Admin account and approve the app (Global Reader, read-only). We collect the data and compare it against the NIS2 M365 baseline.
Results within 2 business days
From the app registration, within +2 business days: the technical report + a Czech management summary with a prioritized remediation plan.
90 min consultation
A slot with a consultant within 3 business days — we walk through the whole report and what to fix first.
Money-back guarantee
If the audit doesn't happen or we fail to deliver the report, we refund you. You don't buy blind — the risk is on us.
Read-only, NDA first, real people
For a product that looks into your tenant, trust matters more than price. That's why the whole access is designed so you take no risk.
✓ Read-only access, only for 48 hours
The app gets read-only permissions only (Global Reader). We change nothing in the tenant, we only read the configuration. Access is time-boxed — it expires by itself after 48 hours and can be revoked earlier at any time.
✓ NDA first, qualified signature
We confirm confidentiality before we touch the environment. You see the mutual NDA template up front and sign with your qualified certificate — just as you sign contracts. No plain clickwrap.
✓ Where your data ends up
We process the report and data under GDPR. Access is revoked once the audit is done. The report is available only to you and the people you designate.
✓ Real people, not anonymous SaaS
Roman & Lenka Krutina, ICT-GROUP s.r.o. Fully managed Microsoft 365 IT for companies since 2004. 200+ clients, 7 years average cooperation, 4.96/5 on Google.
We run Microsoft 365 for 200+ companies. We handle NIS2 from the inside.
Since 2004 I've been running fully managed Microsoft 365 IT for small and mid-sized companies in the Czech Republic and Slovakia. Currently 200+ active clients, 7 years average cooperation. I know what an M365 tenant that meets NIS2 looks like — and what one that doesn't.
The new Cybersecurity Act (NIS2) has been in effect since 1 Nov 2025 and obligations are kicking in now. This audit gives you the technical picture of your real state — not a legal calculator, but a concrete list of gaps with priorities. No consultant on site, no weeks of waiting.
If we find problems — you get a report and a plan for what to do. Whether you fix it with us or with your own IT is up to you. We don't push you into anything.
Before you decide
Is this a penetration test? ▼
No. We don't attack and we don't test resilience from the outside. We're inside with your permission (read-only) and we check the compliance of your Microsoft 365 configuration with NIS2 requirements.
What permissions does the app get? ▼
Read-only only — Global Reader, just for the duration of the audit. We change nothing in the tenant. Access is time-boxed (expires after 48 hours) and can be revoked earlier at any time.
Is the report in English? ▼
The technical report is in English (the tool's output). We add a Czech management summary with a prioritized remediation plan — that's part of the price and the main thing you'll work with. An English summary can be provided on request.
How do we sign the NDA? ▼
With a qualified electronic signature — your certificate (I.CA / PostSignum / eIdentity), just as you sign contracts. It's a mutual NDA whose template you see up front. No plain clickwrap.
How fast do I get results? ▼
Within 2 business days of the app registration. The full flow: payment → NDA signature (+1 day) → app registration (+1 day) → results within +2 business days. The 90-minute consultation is booked within 3 business days.
What about the money-back guarantee? ▼
If the audit doesn't happen or we fail to deliver the report, we refund the full CZK 14,900. So you buy with no risk, even though it isn't a "free trial".
What if you find problems? ▼
The report shows concrete priorities — what's critical and where to start. We can take over the remediation and ongoing M365 management as a follow-up service, but we don't push anything on you. The report and the plan are yours, whatever you decide.
Find out where your M365 falls short — before the regulator does.
A technical check of M365 compliance with NIS2. Results within 2 business days, a summary with priorities, a 90-minute walkthrough. Money-back guarantee.
Read-only. NDA first. We change nothing in your environment.