NIS2 is a new European Union directive aimed at increasing the resilience of organizations against cyber risks. It is reflected in the legislation of the Czech Republic in the form of the new Cybersecurity Act No. 264/2025 Coll., effective from November 1, 2025, which expands the number of regulated entities and the scope of their obligations.
affects 18 industries and entities providing one of 60 services.
obligations also apply to subsidiaries and suppliers of regulated entities
affects more than 6,000 companies in the Czech Republic
requires recording all of an organization's assets and managing risks related to them
imposes an obligation to implement organizational and technical measures
regulated entities will need to monitor and detect unusual or suspicious behavior in systems
introduces requirements for the detection, evaluation and reporting of incidents to the National Cyber and Information Security Agency (NÚKIB) and the Office for Personal Data Protection (ÚOOÚ)
imposes an obligation to regularly check and audit suppliers
Requirements of the new law - NÚKIB presentation can be found here.
check whether the new law applies to you
we will compare your security measures with the new requirements
we will propose an effective solution without complex and costly measures
we will provide you with certified specialists
we will train your employees
we will provide you with free SW tools for security management