NIS2 SME Checklist - Identify critical services - Map risks - Assign responsibilities - Document controls - Track remediation actions