🛡️ EU Digital Resilience Toolkit

NIS2 Gold Standard Assessment 2026

Privacy-first | 100% NIS2/DORA/ISO 27001 Coverage | Audit-ready

🛡️ Comprehensive NIS2 & DORA Compliance Assessment

Valuta la tua postura di resilienza digitale e identifica i gap normativi in modo interattivo

✅
100% Privacy
Zero data collection
⚡
Real-Time
Feedback immediato
📊
Report Completi
Export TXT/CSV/PDF
🎯
Best Practice
Consigli actionable

✅ Privacy-First

All data stays in your browser. No data is collected or stored on any server.

✅ Actionable

Get specific, prioritized recommendations based on your responses.

✅ Audit-Ready

Generate professional reports for compliance documentation.

✅ Comprehensive

Covers 6 critical areas with 130-point scoring system (NIS2, DORA, GDPR, AI Act, CRA, ISO 27001, NIST CSF, Physical Security).

🆕 PDF Reports

Professional PDF reports with executive summary, compliance graphs, and risk matrices ready for Board presentations.

🆕 Remediation Plans

Automated action plans with priorities, timelines, budget estimates, and responsibility assignments.

🎯 6 Assessment Areas - NIS2 Gold Standard 2026 (130pt)

✨ Assessment Introduttivo Automatico - Best practice per ogni risposta

1️⃣ Governance & Legal

  • Board approval & CdA
  • Model 231 updates
  • CISO/DPO/AI Officer
  • Executive training
  • 🆕 ISO 27001 SGSI
  • 🆕 NIST CSF 2.0 mapping
  • 🆕 Security policies catalog
  • 🆕 Employee training (all staff)

Max Score: 29 pts

2️⃣ Risk & Asset Management

  • Unified inventory
  • AI classification
  • DPIA & SBOM
  • Risk assessments
  • 🆕 Key personnel inventory
  • 🆕 Continuous improvement (PDCA)

Max Score: 19 pts

3️⃣ Supply Chain Security

  • ICT supplier register
  • Contract clauses 2026
  • Certifications
  • Concentration risk
  • 🆕 Exit management (offboarding)
  • 🆕 Shadow IT control (CASB)
  • 🆕 BYOD & IoT policy (MDM)

Max Score: 22 pts

4️⃣ Incident Response

  • 24h CSIRT notification
  • 72h GDPR breach
  • Crisis communication
  • Simulation exercises
  • 🆕 Digital Forensics capability

Max Score: 18 pts

5️⃣ Technical + Physical Security

  • MFA & Zero Trust
  • Encryption at rest/transit
  • Vulnerability mgmt
  • 🆕 Patch management SLA
  • Immutable backups
  • 🆕 Physical security (badge/biometria)
  • 🆕 Environmental controls (UPS/fire)
  • 🔥 Business Continuity RTO (KILLER)

Max Score: 27 pts

6️⃣ AI & Ethics

  • AI transparency
  • Bias testing
  • Human oversight
  • Conformity assessment

Max Score: 15 pts

📊 Risk Classification

🟢 LOW RISK

Score: ≥111/130 points (≥85%)

Strong compliance posture with minimal gaps. Organization demonstrates mature security controls and governance processes.

🟡 MEDIUM RISK

Score: 85-110/130 points (65-84%)

Moderate compliance gaps that require attention. Some controls in place but improvements needed.

🔴 HIGH RISK

Score: <85/130 points (<65%)

Significant compliance gaps requiring immediate action. Critical controls missing or inadequate.

Takes approximately 10-15 minutes to complete

About This Tool

The EU Digital Resilience Toolkit is an open-source project designed to help organizations prepare for the comprehensive EU regulatory landscape of 2026.

Key Features

  • 🔒 100% client-side processing - your data never leaves your browser
  • 🎯 Comprehensive 6-area Master Check-list (130 points) covering NIS2, DORA, GDPR, AI Act, CRA, ISO 27001, NIST CSF
  • ⚡ Real-time feedback con best practice per OGNI risposta - sostituisce consulenti umani
  • 📊 Instant scoring and prioritized recommendations with specific regulatory article references
  • 📄 Exportable reports in multiple formats (TXT, CSV, **PDF Professionale**)
  • 🎯 **Remediation Plan Generator** - piano d'azione automatico con priorità, timeline, budget, responsabilità
  • ✅ Policy/Implementation/Evidence verification approach for audit rigor
  • 🔥 Include "killer questions" su Business Continuity RTO effettivo
  • 💼 **Enterprise-grade PDF reports** con grafici, executive summary, matrice di rischio

Covered Regulations & Standards

  • 🔐 NIS2 Directive: Cybersecurity for essential & important entities
  • 🏦 DORA: Digital Operational Resilience for financial sector
  • 🛡️ GDPR: Data protection and privacy compliance
  • 🤖 AI Act: Artificial Intelligence governance and ethical AI
  • ⚙️ Cyber Resilience Act: Security requirements for digital products
  • ⚖️ D.Lgs. 231/2001: Organizational Model for corporate liability
  • 🆕 ISO 27001:2022: Information Security Management System (SGSI)
  • 🆕 NIST CSF 2.0: Cybersecurity Framework (6 functions)

6 Assessment Areas

  • 1️⃣ Governance & Legal: Board accountability, Model 231, role assignments (CISO/DPO/AI Officer)
  • 2️⃣ Risk & Asset Management: Unified inventory, AI classification, DPIA, SBOM
  • 3️⃣ Supply Chain: ICT supplier register, contract clauses 2026, certifications
  • 4️⃣ Incident Response: Multi-channel notifications (24h CSIRT, 2-4h ESA, 72h Garante)
  • 5️⃣ Technical Measures: MFA, Zero Trust, encryption, vulnerability mgmt, immutable backups
  • 6️⃣ AI & Ethics: Transparency, data quality, human oversight, conformity assessment

Use Cases

  • 🏦 Pre-audit preparation for financial institutions
  • 🤝 Vendor risk assessment
  • 📊 Board-level compliance reporting
  • 💼 Compliance consulting and gap analysis
  • 📈 Continuous improvement tracking towards 2026 deadlines

Disclaimer

This assessment is a readiness and risk evaluation tool. It does not constitute legal advice. Organizations should consult legal counsel for compliance strategy.

📚 View on GitHub 🐛 Report Issues