Readiness check
Which processes come back, and which only on paper?
At the end of the readiness check you get a table like this one: every critical process, its recovery time and whether the plan was ever tested. Plus your NIS2 classification.
SITUATION REPORT · EXAMPLE
| Process | Recovery | Last tested | Status |
|---|---|---|---|
| Order intake | 4 h | 03/2026 | tested |
| Warehouse and shipping | 24 h | 11/2025 | tested |
| Payroll | 72 h | never | paper only |
| Customer portal | 8 h | never | no plan |
| Email and phone | 2 h | 06/2026 | tested |
Example data. A filled red dot means action needed; the status is always written next to it.
What you get
NIS2 classification
Directly, indirectly or not in scope, with reasoning.
Situation report
Critical processes, recovery times and test status on one page.
The three biggest gaps
With effort and order, so it is clear what comes first.
Action plan
What you can do internally and where you need support.
How it works
Conversation
Starting point, sector, size and existing documents.
Document review
Continuity plan, backup concept, contracts with providers.
Interviews
Short conversations with the owners of critical processes.
Situation report
Results with priorities, discussed with management.