NIS2 · DNSC Order 1/2026

Get NIS2-ready before DNSC asks for proof

We confirm whether and how NIS2 applies to you, show you exactly how to close the gaps, and help you prepare the evidence your self-assessment and audit will need. You stay focused on running the business.

Based on OUG 155/2024 & DNSC Order 1/2026All 218 DNSC controls mappedPractical solutions, not just a report
Up to 218controls to implement, document and score — 34, 133 or 218 depending on your assurance level.DNSC Order 1/2026
60 daysto submit the maturity self-assessment after your risk evaluation — then every year.OUG 155/2024, Art. 18(7), 12(4)
€10M / 2%maximum fines for essential entities under NIS2 — €7M / 1.4% for important ones.Directive (EU) 2022/2555, Art. 34
Sound familiar?

Where most companies get stuck

“Does NIS2 even apply to us?”

Sector, size and DNSC's decision decide it — and the answer isn't always obvious.

“Which level are we — 34 or 218 controls?”

Your assurance level comes from a risk calculation that's easy to get wrong.

“We do it — but it's not written down.”

Each control is scored for documentation and implementation. Undocumented practice scores low.

“Where do we even start?”

MFA, backups, logging, supplier contracts… 218 controls need to become a clear, prioritised plan.

How we help

From “are we in scope?” to audit-ready evidence

Scope & level

We confirm whether NIS2 applies and prepare your DNSC risk-level evaluation.

Gap assessment

Every applicable control scored for documentation and implementation, tracked in your client portal.

Remediation plan

Prioritised, practical solutions for every gap — MFA, backups, logging, segmentation, policies — with implementation support where you want it.

Evidence pack

Scores, justifications and evidence ready for your NIS2@RO self-assessment and the audit.

Why ArxIT Fortis

Practical engineers, not consultants who hand over a report

Practical solutions

Three senior engineers covering servers, cloud, networks, databases and security — we show you how to close each gap, not just list it.

Everything in one portal

All DNSC controls, your scores, evidence files and remediation plan in one place — always ready to show.

Honest about our role

We're not a certification body and don't perform the official DNSC audit. We prepare you for it — properly.

Free readiness check

How ready are you? Find out in 3 minutes

Ten questions on the areas that matter most in the DNSC controls. Answer them and get a personalised PDF report by email: your indicative score, your priority gaps and what to do about each.

Almost done — where should we send your report?

Give us a few details about you and add your email to receive your personalised NIS2 readiness report as a PDF: your indicative score, your priority gaps and what to do about each.

Indicative only — this is not the official DNSC self-assessment, which covers every applicable control on the NIS2@RO platform. Your answers are sent to us only when you request the report.

NIS2 in brief

More details about NIS2

Romania applies NIS2 through Emergency Ordinance 155/2024. DNSC Order 2/2025 sets how your assurance level is calculated, and DNSC Order 1/2026 defines the controls and the maturity self-assessment. Our guide explains who is in scope, how the level is decided, the deadlines and the fines — in plain English, with links to the official texts.

Read the full NIS2 guide →

Let's get you NIS2-ready

A 30-minute call to understand your situation and what you need. No sales pitch.