Compliance & Regulations
Sector-Specific Compliance — 8 Fixed-Price Services
NIS2 for critical infrastructure, DORA for fintech, EAA/WCAG for accessibility. Industry-specific compliance requirements with clear applicability assessment.
NIS2 Directive
View allApplicability, gap analysis, supply chain audit, management training, quarterly reviews.
DORA (Financial Sector)
View allICT risk assessment, third-party provider risk, resilience testing, incident reporting.
Accessibility (EAA / WCAG)
View allWCAG 2.1 Level AA audit. Required by European Accessibility Act for e-commerce.
Sector-Specific Compliance — Price List
| Service | Price | Action |
|---|---|---|
NIS2 NIS2 Applicability Assessment | $199 | Details → |
NIS2 NIS2 Gap Analysis & Compliance Roadmap | $590 | Details → |
NIS2 Supply Chain Security Audit | $490 | Details → |
NIS2 Cybersecurity Training for Management | $490 | Details → |
NIS2 Employee Cybersecurity Awareness Training | $349 | Details → |
NIS2 NIS2 Quarterly Compliance Review | $349/quarter | Details → |
DORA Third-Party ICT Provider Risk Report | $390 | Details → |
Multi-Framework Website Accessibility Audit (WCAG 2.1) | $349 | Details → |
Not sure which framework applies?
- • EU personal data → GDPR (any company with EU customers)
- • Critical infrastructure → NIS2 (50+ employees or €10M+ revenue in 18 sectors)
- • Enterprise B2B sales → ISO 27001 or SOC 2 (clients ask for proof)
- • Payment processing → PCI DSS (credit card data handling)
- • Financial services → DORA (banks, insurance, fintech)
Frequently Asked Questions
What is NIS2 and does it apply to my company?+
NIS2 is the EU directive for cybersecurity of essential and important entities. It applies to companies in 18 sectors with 50+ employees or €10M+ revenue. Our Applicability Assessment ($199) gives you a clear answer.
What is DORA and who needs it?+
DORA (Digital Operational Resilience Act) applies to financial entities: banks, insurance, investment firms, payment institutions, and their critical ICT providers. It took effect January 2025.
What is the European Accessibility Act (EAA)?+
EAA requires e-commerce websites and digital services to be accessible (WCAG 2.1 Level AA) by June 2025. Non-compliance means your website can't legally sell to EU consumers. Our audit ($490) checks compliance.
What are the penalties for NIS2 non-compliance?+
Essential entities: up to €10M or 2% of global turnover. Important entities: up to €7M or 1.4% of global turnover. Management can be held personally liable. The directive is enforced from October 2024.
Can NIS2 and DORA requirements overlap?+
Yes — financial institutions under DORA may also fall under NIS2. DORA takes precedence for financial-sector-specific requirements, but NIS2 still applies for general cybersecurity measures. Our assessments cover both.
$5
Not Sure Where to Start?
Our IT Health Check finds every compliance gap in your infrastructure. 1 business day. You get a prioritized list of what to fix.
Need help choosing?
Start with a Multi-Framework Assessment ($690) to get a complete compliance roadmap.