In the last couple of months, I've done several NIS2 assessments and discovered something interesting: NIS2 scores an organization based on two dimensions: Documentation and Implementation.