The NIS2 and ZoKB directives establish a new framework for ensuring cybersecurity and protecting critical information infrastructures, which is absolutely crucial for increasing your company's resilience against security incidents and ensuring the continuity of your business activities in the event of possible security incidents.
The services we are preparing will offer comprehensive consulting, effective analysis of risks, vulnerabilities and threats in your company, implementation of state-of-the-art security measures and specialized training, all focused on ensuring full compliance with the NIS2 directive and the law.
We are confident that our services will bring you maximum value and help you safely manage all the requirements of this directive. Details of these new services can be found further down this page.
NIS2
We are currently preparing additional services for you , which will include support within the framework of the NIS2 (Network and Information Systems Directive) and the new Cybersecurity Act (ZoKB) .
What will you be able to contact us about within NIS2?
You can already fill out our questionnaire to find out whether your company will fall under the NIS2 regulation, or how strict the rules for you are under the directive.
01
Determining the scope of cybersecurity
To begin with, it is important to correctly identify what needs to be protected in the company. This is a very crucial and challenging phase, when all important assets in the company must be taken into account. Together we will be able to correctly define the complete scope of cybersecurity in your company.
03
Implementation of security measures
We will help you identify and effectively implement all necessary security measures that result from both the directive and the results of the analysis performed in your company.
02
Analysis of the current state, identification of weak points
Another key part of assessing compliance with NIS2 is an analysis of the current state of cybersecurity in your company, specifically, for example, the measures currently in place, reporting and identification of security incidents, threats and risks related to cybersecurity, etc.
04
Support and advice, training
We will take care of NIS2 in your company and organize the necessary trainings regarding relevant areas in cybersecurity. The trainings can be customized according to your specific needs.
We will define specific areas of impact of NIS2 in your organization.
The scope of cybersecurity tells us what actually needs to be protected in a company .
The scope of cybersecurity includes primary assets, supporting assets, and other affected parts of the organization.
Primary assets are company knowledge, information and data
Supporting assets are people, processes, HW, SW, infrastructure and purchased services on which primary assets depend.
01
Identification of primary and supporting assets
First, we will compile a list of all assets that are essential to the functioning of your company. We will divide them into primary and supporting ones and define the links between them.
02
Valuation of primary and supporting assets
We will then jointly evaluate all assets from several perspectives, which will give us an overview of the most important assets in your company and what we will pay the most attention to when creating risks and subsequent measures.
We will perform a complete analysis of the weaknesses in your organization!
We will conduct a comprehensive analysis of your company's current cybersecurity situation and identify and assess all potential threats, vulnerabilities, and risks that arise from the analysis. By identifying these weaknesses, you will be one step closer to comprehensively protecting your company's data, reducing the risk of disruption and financial losses caused by cyber attacks.
1. Analysis
As part of the analysis, we will map the current state of company processes, existing measures, assets and other parts of the company, and we will also assess the extent to which they are currently in line with NIS2.
2. Weak points
The analysis will provide us with an overview of all threats, vulnerabilities and risks in your company. We will evaluate and rank these weaknesses according to several criteria, which will give us an overview of what to primarily pay attention to.
3. Suggestions for solutions
Once we have identified weaknesses in the company, we will draft measures based on them that will ensure an advanced level of cybersecurity in your company and in accordance with NIS2.
We will help you implement all the necessary measures!
Security measures tell us how to protect assets in a company . Several are mandatory by directive and law. The scope of mandatory measures that must be implemented in a company depends on two aspects:
First of all, it is necessary to take into account the severity of threats, vulnerabilities and risks in the company that result from the analysis, and secondly, it also depends on the regime of obligations to which your company falls according to the questionnaire , i.e. a company in a regime of higher obligations has much more complex mandatory measures that it must implement, unlike a company in a regime of lower obligations.
We will implement all necessary measures resulting from the analysis and the directive in your company using several proven methods and techniques.
We will organize the necessary training for compliance with NIS2!
NIS2 and ZoKB
We will introduce you to the NIS2 and ZoKB directives:
We are not just theorists - after the theory part, we will start working with you on an NIS2 solution specifically for your company, including adding experience directly from your field.
Who is the cybersecurity training for?
It is recommended for everyone who...
What will you learn about NIS2?
introduction of NIS2 and ZoKB
principles of the directive and the law
obligations arising from the directive and the law
You will also take away a number of practical documents and templates that will make your agenda related to NIS2 and ZoKB easier.
Cybersecurity
We will introduce you to important topics in cybersecurity.
Who is this cybersecurity training intended for?
This training is recommended for everyone.
What will we cover in terms of cybersecurity?
-
TDevice security techniques
-
Firewalls, antivirus software, and their limitations
-
Malware and its symptoms
-
Risks of downloading programs and apps
-
Software updates
-
Risks of enabling/disabling macros
-
Risks of executable files
-
User account security principles
-
Password use, creation, and management
-
Multi-factor authentication
-
Social engineering techniques
-
Online identity, digital footprint, and its minimization
-
Principles of working on a computer network
-
Use of remote connections (VPN)
-
Secure electronic communication
-
Website security
-
Data backup, storage, and encryption
-
Secure use of portable data storage devices
-
Use of cloud storage
-
Rules and procedures for reporting unusual behavior of technical assets and suspected vulnerabilities
-
Basic procedure for responding to a cybersecurity event or incident
-
Policy on the use of work devices for personal purposes
-
Policy on the use of personal devices for work purposes (BYOD security)
-
Employee personal responsibility for compliance with cybersecurity policies
-
Current cybersecurity threats
NOT TRANSLATED