A few months ago I sat across from the director of a logistics company. 80 employees. Trucks. Warehouses. The man had a quote on his desk from a NIS2 consultancy firm. The quote was 47 pages long. The total amount, excluding VAT, was €128,000. The project promised "complete NIS2 compliance" within "12 to 18 months", with "expert guidance across all 10 measure areas" and "audit-readiness guarantee".
The director asked me: "should I do this?"
I asked him: "do you know what risks you're currently running?"