Is there any practice-oriented list of actions to undertake? The article has some details, e.g the 10 minimum measures ( https://nis2directive.eu/nis2-requirem

Is there any practice-oriented list of actions to undertake? The article has some details, e.g the 10 minimum measures ( https://nis2directive.eu/nis2-requirements/ https://nis2directive.eu/nis2-requirements/ ) but I'm not too happy with them. On the good side, the main concrete thing I see in that list is MFA. But all the other things in there seem ways to keep some consultants busy writing vague documents, not real steps forward to a secure organizations.