The New Czech Cybersecurity Act (ZoKB)

The aim of the new NIS2 directive is to expand the range of companies that are obliged to address their readiness to respond to cyberattacks. Rather than a bureaucratic whim, this is the state offering support for companies in the current problematic security situation by obliging them to allocate reources for cyberprotection. The directive will have to be implemented in the Czech legal system, which is why a new Czech Cybersecurity Act (Zákon o kybernetické bezpečnosti) is being drafted.

What’s changing?

The law is yet to be approved, but comments have already been made by the professional community with the key points being:

Obliged entities register themselves with the NÚKIB.
Accountability of the governing bodies is introduced.
It’s likely that buyer-supplier chains will need to be reviewed.

NÚKIB warns companies not to order NIS2 consultations before the final approval of the new Czech Cybersecurity Act. On the other hand, they acknowledge that it’s a good practice to protect your systems in accordance with widely known IT security standards.

Why choose us?

If you want to find out where your IT systems stand in terms of compliance with the current draft of the Czech Cybersecurity Act, we’re here for you. Our NIS2 GAP analysis service will present you with a comprehensible overview of areas that need improvement. We’ve been providing consultancy for over 15 years and have garnered expertise working with the largest companies in the Czech Republic and Europe. We understand both business and technology which allows us to efficiently bridge the communication gap between these fields.

Excellent analytical skills
Straightforward and comprehensible outputs
Great overview of existing solutions

Systematic improvement of security

Based on a comprehensive report, you’ll be able to discern steps whose implementation is a priority and those that may be delayed for later. To support your decisions, we’ll provide a cost/progress assessment of your security posture. We understand and respect that the degree of planned investments in cybersecurity varies from company to company. It’s entirely up to you to decide the pace you’ll take.