Yes. ISO 27001 provides a structured risk management approach that aligns well with NIS2 requirements.
Organizations can use ISO 27001 as a foundation, but should ensure it also covers:
- Business continuity
- Supply chain risks
- Incident reporting obligations under NIS2