NIS2 evidence template kit.

Four templates for what comes after registering with the BSI, as Excel, PDF and OSCAL.

Assess risks, report incidents on time, review suppliers and prove your implementation. Every template is ready to fill in and cites the relevant section of the German BSIG.

The templates are in German, like the BSIG they implement.

  • 01-Risikoanalyse.xlsx
  • 02-Meldeprozess-24h-72h.pdf · 02-Meldeprotokoll.xlsx
  • 03-Lieferanten-Checkliste.xlsx
  • 04-Nachweis-Matrix-BSI.xlsx
  • 05-secani-nis2-nachweispaket.oscal.json

Get the kit

We'll send you a confirmation link. See our privacy policy.

What's in the kit.

Four templates that build on each other, with references to the BSIG as amended by the NIS2 implementation act.

01

Risk analysis

Risk register with a rating scale, calculated risk level, treatment under § 30(2) BSIG and management approval. Includes all 47 BSI elementary threats.

01-Risikoanalyse.xlsx

02

Reporting process 24 h / 72 h

The process from becoming aware to the final report, roles with deputies, what each report contains, and a reporting log that calculates the deadlines.

02-Meldeprozess-24h-72h.pdf · 02-Meldeprotokoll.xlsx

03

Supplier checklist

Supplier register with criticality and 20 questions on evidence, contracts, access, exit and monitoring.

03-Lieferanten-Checkliste.xlsx

04

Evidence matrix for a BSI audit

51 measures with the evidence an audit expects, legal references and applicability, plus the audit folder the BSI wants to see first.

04-Nachweis-Matrix-BSI.xlsx

Ready to import.

All templates also come as an OSCAL 1.2.2 catalog that Secani adds as a framework.

  1. 1

    Upload the file

    In Settings under “Frameworks”, add 05-secani-nis2-nachweispaket.oscal.json as a custom framework.

  2. 2

    Assign owners

    Every step, every supplier question and every measure in the evidence matrix becomes a requirement with an owner.

  3. 3

    Attach evidence

    Attach documents to the measure and track its status instead of maintaining file locations in a spreadsheet.

Five emails, one per template.

If you agree, we'll explain each template briefly and practically over the two weeks after your download.

  1. Day 1The risk analysis everything starts with
  2. Day 3Reporting within 24 and 72 hours
  3. Day 6The suppliers you should assess
  4. Day 9The evidence matrix for the BSI
  5. Day 13From templates to ongoing implementation

NIS2 evidence template kit FAQ

Nothing. Confirm your email address and download the kit. You don't need a Secani account.

For companies that count as important or essential entities under the German BSIG. The NIS2 check shows in a few minutes whether your company is affected. Take the NIS2 check

No. The templates are in German, like the BSIG they implement and the reports you submit to the BSI.

OSCAL is an open NIST standard for security requirements and evidence. The Excel and PDF templates work without Secani. You can import the OSCAL file into Secani as a custom framework. More about OSCAL

No. The templates are working aids based on the BSIG as of October 2026. They replace neither legal advice nor an audit by the BSI or an auditing body.

We use them to send you the kit and, with your consent, the follow-up emails. If you don't confirm your address, we delete your details after 30 days. Privacy policy

Get the kit.

Four templates, one OSCAL file, free of charge.

Get the kitTake the NIS2 check