This path starts with the question most companies ask first, does NIS2 apply to them, and then goes through its duties in the order you would tackle them.
Work out if you are covered and which duties follow.
Go through the measures of Article 21 line by line.
Point (a) of Article 21 starts with risk analysis.
Point (d) covers your supply chain.
Point (c) covers continuity, backups and crisis management.
Point (f) asks you to assess whether your measures work.
