Knowledge base
November 11, 2025
ICT 0 Measurement – Ready for NIS2 & Security Awareness
Why 0 measurement is essential now
Cyber attacks, data breaches and compliance requirements are higher than ever on the agenda. With the advent of NIS2 and the new Cybersecurity Act, organizations must structurally demonstrate that their digital resilience is in order. Not a luxury, but a necessity.
An ICT 0-meting is a thorough analysis of your current IT environment. You discover where vulnerabilities are, how you score on security awareness and to what extent you are compliant with laws and regulations such as AVG, ISO27001 and NEN7510.
At ALTA-ICT we offer a free IT scan that provides insight into exactly these issues. Especially for the Dutch market and tailored to sectors such as SMEs, healthcare, government and finance.
What is an ICT 0 measurement?
A 0 measurement is the zero point: an objective analysis of your IT landscape.
We look at:
- Hardware & software (obsolescence, licenses, support status)
- Network structure & access management
- Security layers: firewalls, antivirus, MFA
- Backup & recovery procedures
- Security awareness among employees
- Laws and regulations: AVG, NIS2, sector-specific
The latter in particular will take on added weight in 2025. Indeed, NIS2 requires active risk assessment, training, incident response and notification requirements.
How does it work in practice?
Step 1: Inventory & Risk Analysis
An overview of all assets, users and permissions. Including technical and human vulnerabilities.
Step 2: Technical check
Are systems patched? Are passwords strong enough? Is your email security in order?
Step 3: Awareness quick scan
We measure your employees’ awareness: do they recognize phishing? How often do they use strong passwords?
Step 4: Report with recommendations
In understandable language, you get a concrete improvement plan, priority list and customized advice.
Our approach is ISO27001 and NEN7510 compliant, including AVG assessment.
Common mistakes we see (and avoid)
- No current overview of hardware/software
- Admin rights for too many users
- No multi-factor authentication
- No security awareness among employees
- Failure to comply with data breach notification requirements (72 hours)
Thanks to our 0 measurement, you get a grip on these risks even before they lead to incidents.
What does it provide?
- Understanding your IT risks and vulnerabilities
- Compliance status with respect to NIS2 and AVG.
- Roadmap for improvements
- Basis for ISO certification processes.
- More aware employees through insight
And the best part? It’s free. Our IT scan is completely non-binding, but provides valuable insights immediately.
Why ALTA-ICT?
- ✓ ISO27001, ISO9001 and NEN7510 certified
- ✓ Specializing in Dutch laws and regulations
- ✓ Practical, clear report with priorities
- ✓ +15 years of experience in SME, healthcare, finance & government
- ✓ Local experts, no standard template
Frequently Asked Questions
What is the difference between an 0 measurement and a pen test?
An 0 measurement is broad and organizational, a pen test is technical and in-depth focused on simulating attacks.
How often should I do this?
At least annually, or when major changes occur in your IT or organization.
Is this mandatory under NIS2?
Not literally, but structural risk assessment and awareness are required.
What happens after the free scan?
You will receive a report and recommendations. No obligation to follow up.
What does a follow-up approach cost?
Depending on your size and risks. We always provide a transparent quote in advance.
Ready for 2026?
An ICT 0 measurement is your first step toward digital resilience. Don’t wait until it becomes mandatory or goes wrong. Discover where you stand today.
Want to know more?
