Art. 21(2)(a)
Risk Analysis & Security Policy Toolkit
Assess and evidence your risk-analysis methodology and information system security policies, as required by article 21(2)(a).
- Maturity assessment workbook (Excel, 30 questions, 0-4 scoring)
- Risk analysis methodology (PDF, 24 pages)
- 5x5 risk heat map with automatic scoring
- Mapping to ISO/IEC 27001:2022 Annex A and NIST CSF 2.0
Art. 21(2)(b) · Art. 23
Incident Handling Toolkit
Build the incident handling capability article 21(2)(b) requires, wired to the 24h / 72h / one-month reporting chain of article 23.
- Maturity assessment workbook (Excel, 30 questions)
- Incident response plan template (Word)
- Early warning (24h), notification (72h) and final report (1 month) templates
- Severity classification matrix and decision tree
Art. 21(2)(c)
Business Continuity & Crisis Management Toolkit
Backup management, disaster recovery and crisis management, the three components named in article 21(2)(c).
- Maturity assessment workbook (Excel)
- Business continuity plan and DRP templates (Word)
- Business impact analysis workbook with RTO/RPO calculator
- Crisis communication playbook and exercise scenarios
Art. 21(2)(d) · Art. 21(3)
Supply Chain Security Toolkit
Supplier risk assessment and contractual security requirements — the obligation most entities are least prepared for.
- Supplier security questionnaire (50 controls, Excel)
- Supplier risk scoring and tiering model
- Contractual security clauses library (Word)
- ICT supplier register template aligned with article 21(3)
Art. 21(2)(i) · 21(2)(j)
Access Control, MFA & Asset Management Toolkit
Human resources security, access control policies, asset management and the multi-factor authentication requirement of article 21(2)(j).
- Maturity assessment workbook (Excel)
- Access control and MFA policy templates (Word)
- Asset inventory and classification workbook
- Joiner / mover / leaver procedure and access review checklist
Best value
Complete Assessment Toolkit Bundle
All five assessment toolkits: risk analysis, incident handling, continuity, supply chain, and access control with MFA.
- All 5 assessment toolkits (Excel + PDF each)
- Consolidated maturity dashboard across all article 21 measures
- Single gap-analysis view with prioritised remediation plan
- Lifetime updates as national transpositions evolve