Regulatory workshops: from the article to the implementation
A gap analysis tells you what's missing. A regulatory workshop teaches your compliance and legal team to work through the requirements article by article, using the same criteria an auditor will.
Why a gap analysis doesn't replace a working session
A gap analysis report identifies which controls are missing, but it doesn't teach the team that has to implement them how to interpret the article, prioritise the effort, or document evidence in a way that survives an audit. The usual result is a document the compliance team doesn't know how to translate into tasks. The regulatory workshop works on your own gap analysis, or on the regulation's text if none exists, as a joint working session rather than a one-way talk: specific articles get reviewed, the room decides how to cover them, and everyone leaves with a plan assigned by person.
What the workshop covers
- A joint read-through of the articles that apply to your organisation, without unnecessary legal language
- Work on your own gap analysis, if one exists, to prioritise what to cover first
- Documentation templates that a NIS2, DORA or ENS auditor expects to find
- Assignment of owners and deadlines per control, closed within the session itself
- A mock audit round of questions on the controls already covered
How we prepare the workshop
- Choosing the regulation and scope: We confirm whether the workshop covers NIS2, DORA, ENS or several at once, and which articles are priority for your case.
- Gathering prior material: If a gap analysis or previous audit exists, we use it as the starting point instead of starting from scratch.
- Working session: Workshop format, not a talk: small groups, specific articles, decisions made in the room.
- Assigned action plan: You leave the session with tasks, owners and deadlines, not just notes.
- Session documentation: We deliver a summary of the workshop and the action plan in the format an auditor expects.
What the team receives
- A half-day or full-day workshop, on-site or online
- Action plan with owners and deadlines per control
- Documentation templates adapted to the regulation worked on
- Session summary as evidence for the auditor
- Attendance record and contents covered
When this workshop fits
- Compliance or legal teams that have a gap analysis and don't know where to start implementing it
- Companies midway through a NIS2, DORA or ENS adequacy project that need to unblock progress
- Organisations that split compliance responsibility across several people with no shared criteria
- Teams preparing for an upcoming external audit who want to rehearse the questions
Frequently asked questions about regulatory workshops
Is this the same as the regulatory compliance service?
No, they are complementary. The compliance service runs the gap analysis, drafts the documentation and supports the full project end to end. The workshop is a one-off working session: it builds on that gap analysis, or on the regulation if you don't have one, and leaves the team with an assigned plan. Many clients contract the workshop as a starting point before deciding whether they need the full project.
Is this the same as the leadership session?
No. The leadership and board session is a 2-3 hour talk on risk and legal accountability, built for whoever decides budget. The regulatory workshop is a longer, more technical working session, built for whoever has to implement the controls day to day.
How long does it take and how much does it cost?
Usually half a day or a full day, depending on how many articles or controls are worked through. It is quoted per session, with a fixed price before starting. The first scoping call is free.
Can you cover several regulations in the same workshop?
Yes, when they share controls —NIS2, DORA and ISO 27001 overlap significantly in risk and incident management— working them together in the same workshop saves time compared to repeating the session for each regulation.