Mapping NIS2 controls to ISO 27001 and NIST CSF for UK SMEs

This practical guide explains how UK SMEs can map NIS2 controls to ISO 27001 and NIST CSF to maximise reuse of existing policies and processes, identify likely gaps (governance, incident response, continuity, supplier security), and produce a short, actionable improvement plan that emphasises ownership, evidence, and pragmatic prioritisation rather than a literal one-to-one checklist.