For smaller companies usually 2 to 4 weeks. The exact time depends on the size of your IT and on the documentation you already have.
Gap analysis, a plan of measures and audit preparation from a single partner. We will tell you what act no. 366/2024 Coll. really requires of you, and what you already have.
Most companies that meet at least one of these criteria have obligations:
You operate in energy, transport, healthcare, manufacturing, ICT or public administration, for example.
You have 50 or more employees, or a turnover above 10 million euros.
You supply services that other regulated entities depend on.
For a rough check, use the official NBÚ test. If you are not sure, we will assess it with you during a consultation.
Registration with the NBÚ — within 60 days of starting a regulated activity.
Putting security measures in place — within 12 months of entry in the register.
The first cybersecurity audit — within 2 years.
Reporting an incident — an early warning within 24 hours, a detailed report within 72 hours.
Failure to comply carries a fine of up to 7 million euros or 1.4 % of worldwide turnover, and up to 10 million euros or 2 % for critical entities.
We compare where you stand today with what NIS2 and the act require.
You get a list of the missing steps, ordered by risk and cost.
Risk management and an ISMS, documentation, MFA, backups, EDR, 24/7 monitoring and an incident reporting procedure.
We check that everything is ready and train your people.
We have looked after the IT of Slovak companies for more than 20 years. Our security team holds CISSP, CEH and OSCP certifications. We will help you meet NIS2 not only on paper, but technically too.
For smaller companies usually 2 to 4 weeks. The exact time depends on the size of your IT and on the documentation you already have.
No. We can take on the role and part of the obligations.
It is not compulsory, but an ISMS under ISO 27001 covers most of what NIS2 requires.
The gap analysis counts them in and we only deal with what is missing.
We give you the price after the opening consultation, which carries no obligation.