NIS2 Directive · BCMLogic Next Lite

NIS2 compliance with BCMLogic Next Lite.
Lite to use. Complete on requirements.

A version of the BCMLogic Next platform built for the NIS2 Directive: entity classification, risk analysis with templates for your sector, policies, incidents and ICT suppliers. From €150 net per month, with unlimited users.

ISO/IEC 27001-certified SaaS30 days freeSector package included
BCMLogic Next LiteStep-by-step action plan

Reporting deadlines

The NIS2 incident clock

Once you become aware of a significant incident, three NIS2 reporting deadlines start running. Next Lite counts them down for you and keeps the evidence.

24 hEarly warning
Alert your CSIRT or competent authority
Flag whether the incident may be caused by unlawful or malicious acts and whether it could have a cross-border impact.
72 hNotification
Submit the incident notification
Update the early warning with an initial assessment: severity, impact and, where available, indicators of compromise.
1 monthFinal report
Deliver the final report
A detailed description, the likely root cause, the mitigation measures applied and any cross-border impact.
What is at stake: fines of up to €10 million or 2% of worldwide annual turnover for essential entities, and up to €7 million or 1.4% for important entities. Management bodies must approve cybersecurity risk-management measures and can be held liable for breaches. Exact rules, authorities and supervision depend on how your country has transposed NIS2.


What is included

What Next Lite covers

Only what NIS2 requires, without heavyweight processes a smaller organisation does not need. Unlimited users, risks and suppliers. See each area in the working application.

The tour moves on by itself. Click an area to stay on it.

NIS2 classifier

Questions tailored to your sector determine whether you are an essential or an important entity and which obligations apply. The result becomes your action plan straight away.

BCMLogic Next LiteNIS2 classifier

Risk analysis with a sector package

Pick your sector package and add risks from ready-made templates instead of starting with an empty table. Every risk has an owner, an assessment and actions.

BCMLogic Next LiteRisk analysis

Security policies

Simple policy templates for your sector, approved by your management body with a record of adoption.

BCMLogic Next LiteISMS policies

NIS2 incident handling

Simplified incident handling with 24 h / 72 h / 1 month deadlines, an activity log and report content ready to submit to your CSIRT or competent authority.

BCMLogic Next LiteIncidents

ICT suppliers

A supplier register and assessments with sector-specific questions, linked to your risk analysis. Assessment results show up in the risk register straight away.

BCMLogic Next LiteICT suppliers

NIS2 AI Expert in the app

The AI assistant works on your data in the system: it suggests next steps, points out gaps in evidence and drafts documents. A person on your side approves every proposal. Available in the With AI expert and With NIS2 expert plans.

Prefer support from a person? In the With NIS2 expert plan, our specialist does not answer chat messages – they help you plan the implementation, advise on how to meet the requirements, review key documents and help you prepare for an audit. Compare plans →
BCMLogic Next LiteNIS2 AI Expert


Getting started

Up and running in four steps

From sign-up to your first classification in a day.

  1. 01
    Enter your organisation details
    Basic company information, entered once and used across the system.
  2. 02
    Choose your sector
    The system loads your sector package: risk templates, policy templates and incident scenarios.
  3. 03
    Classify your entity
    The classifier determines your category and builds a plan with deadlines.
  4. 04
    Work for 30 days free
    Buy whenever you are ready. Everything you do in the demo stays in the system.
BCMLogic Next LiteEntity classification

Sector packages

A content package for your sector

You choose your sector when you create the account. The package is included in every plan and starts with the most pressing issue in your sector.

Healthcare
Fast response to incidents in hospital systems and reporting on time.
Public administration
Security documentation approved by the head of the institution, with a record of adoption.
Drinking water and wastewater
Risks to water supply continuity and control systems (OT) in one register.
Manufacturing
ICT supplier assessment and supply chain risk.
ICT service providers
Compliance evidence you can show your own customers and the supervisory authority.
Energy
A risk register covering IT systems and operational technology (OT).
Transport and logistics
Consistent incident handling across multiple sites and subcontractors.
Telecommunications
Requirements, evidence and an activity history in one place, ready for inspection.

Before you choose a vendor

A real application or a pretty mock-up?

NIS2 tools are multiplying fast, and a screen can be generated in minutes today. Before you trust anyone with your audit evidence, ask the vendor these questions. Here are our answers.

Do I work with real data from day one?
Yes. Lite is a configuration of the live BCMLogic Next platform, not a separate prototype.
Is the service certified for information security?
Yes. The SaaS service is certified to ISO/IEC 27001.
How does access control work?
Roles and authentication based on Keycloak – the same security model as the full platform.
Who develops and maintains the product?
The BCMLogic team, which has been building risk and business continuity software since 2010.
What if we grow?
Moving to the full BCMLogic Next (business continuity, BIA, DORA and more) is a plan change, with no data migration.
Can I see the price without a sales call?
Yes. Full pricing is on our website.

Trust package

NIS2 requires you to assess your ICT suppliers – and your compliance software vendor is one of them. We share the documents your security team will ask for before you buy.

  • ISO/IEC 27001 – SaaS service certificate to download
  • Framework SLA – availability and response times before you buy
  • Security testing – regular application testing
  • Data protection – data processing agreement (Art. 28 GDPR), processing location
  • Exit from the service – export all your data at any time
  • Content from GRC experts – regulatory changes arrive as proposals and never overwrite your data

View the BCMLogic Trust Profile →

Choosing a version

Lite or full BCMLogic Next?

It is the same platform. In the app you can see straight away what is in Lite and what is in the full version.

Area Next Lite BCMLogic Next
Classifier, risk analysis, policies, incidents, ICT suppliers Yes, simplified for NIS2 Yes, in full
Business continuity (BCM, BIA) — Yes
DORA, AI Act, configurable reports, SSO, custom processes — Yes
Deployment model SaaS SaaS or agreed individually
Add-on service

Rather not enter the data yourself?

NIS2 Quick Start: you provide the information in a questionnaire, we enter it into the system. Available with every plan.

  1. 01You fill in one questionnaire
  2. 02We move the data into Next Lite
  3. 03You start work on a ready account

See scope and price →

Pre-sale

Buy by 31 December 2026 and lock in your price for all of 2027

Standard pricing applies from 1 January. Start with a 30-day demo on your organisation’s data.

€150
net per month on the Self-service plan, at the pre-sale price
30 days
free. Everything you do in the demo stays after you buy

FAQ

Frequently asked questions about Next Lite

Does Next Lite make us NIS2 compliant?

No software delivers compliance on its own. Next Lite guides you through the obligations, tracks deadlines and collects evidence that they are being met. Decisions and accountability, including those of the management body, stay with your organisation.

How much does NIS2 software cost in the Lite version?

From €150 net per month at the pre-sale price when you order by 31 December 2026 – the price is fixed for the whole of 2027. Plans differ in the level of support. See pricing.

Who is Next Lite for, and who needs the full BCMLogic Next?

Lite is for organisations that want to meet their NIS2 obligations without heavyweight GRC processes. Organisations that also need business continuity management, DORA, custom processes or SSO choose the full BCMLogic Next. Switching between versions requires no data migration.

Are there limits on users, risks or suppliers?

No. You pay a fixed monthly fee, and as many people as you need can use the system.

Does Next Lite submit incident reports to the authorities?

No. Reports are submitted through the channel of your national CSIRT or competent authority. Next Lite tracks the deadlines, keeps the log and prepares the report content for you to submit.

Will Next Lite help us prepare for a NIS2 audit?

Yes, on the evidence side: approved policies, risk analysis, supplier assessments and the incident log are in one place, with a change history. The audit itself is carried out by an independent auditor or the competent authority.

We are a public sector body. How do we buy?

We will prepare an offer and the trust package documents for your procurement procedure. Payment by bank transfer against an invoice.

What happens to our data after the 30-day demo?

If you buy, everything stays in the system. If not, you can export your data, and the account is deleted after the period set out in the terms of service.

Next step

Try Next Lite on your organisation’s data

Tell us your organisation and sector – we will set up the demo account with your sector’s content package. 30 days free, no payment details required.

Start a 30-day demo →