Gap analysis — NIS2 Netherlands (Cbw, 2026)

Closing summary of the gap analysis against NIS2 Netherlands (Cbw, 2026), held with the Assistant and Sam de Vries after Tidewell IT adopted the framework. Most duties are shared with ISO 27001 and are covered by the ISMS: risk management, supplier security, access control, continuity, and the Policies behind them.

Two areas are still open. The incident reporting steps, with their early warning, notification, and final report, are not part of the incident process yet, and neither is the registration in the national register. Tasks followed for both.