An NIS security audit is the process where Operators of Essential Services (OES) are assessed by their designated CA to ensure they are compliant with the NIS Directive, or are at least putting measures in place to work towards it. Relevant Digital Service Providers (RDSPs) will not be audited but may be investigated if an cyber incident occurs that could indicate non-compliance.