NIS2 is in effect and the to-do list for CISOs is exploding. The frequent result: unclear requirements, a huge documentation ...