SK EN CS
Arrange a consultation
NIS2 and DORA

NIS2 measures in place and ready for audit

For operators of essential services in Slovakia and their suppliers. We map the gaps in your systems, roll out measures in order of risk, and document them so you can demonstrate them to the auditor.

Book a NIS2 consultation How it works
  • Free initial consultation · 30 minutes
  • Technical measures and documentation from one team
Areas of measures

What we put in place and document

We roll out the technical measures that NIS2 and DORA require in your environment. For each one you get documentation and evidence for the auditor or the supervisor.

  • Access management

    Multi-factor authentication, management of permissions and privileged accounts.

  • Backups and recovery

    Backups, recovery tests and a plan for an outage of key systems.

  • Monitoring and logs

    Collecting and evaluating events, alerts and log retention.

  • Vulnerabilities and updates

    Regular scanning, patching and a record of remediation.

  • Incident response

    Classification, escalation and the evidence for reporting an incident.

  • ICT suppliers

    An overview of suppliers, their access and the contractual requirements for the DORA register.

When to come to us

When to talk to us

Most clients come to us with one of these tasks. We take the technical side from analysis to measures in place.

NIS2
Slovak Cybersecurity Act and Directive (EU) 2022/2555

For operators of essential services and for their suppliers whose customers ask them to evidence security measures.

Example requirements
  • Prepare systems and evidence for a security assessment
  • Implement technical measures against confirmed requirements
  • Remediate findings from a previous audit
  • Provide a customer with evidence of security measures
DORA
Regulation (EU) 2022/2554

For financial institutions and their ICT suppliers: infrastructure resilience, recovery after an outage and incident handling.

Example requirements
  • Review a financial institution’s infrastructure and applications
  • Prepare and verify recovery procedures
  • Document monitoring and incident response
  • Prepare technical evidence for a customer or auditor
How we help

From the current state to implemented measures

Five steps from the first conversation to operation. Each one shows who does it.

  1. Initial consultation

    Our team

    We discuss your situation, available information and the next step.

  2. Analysis and plan

    Our team

    For a larger brief, we start by defining the analysis scope. The output covers the current and target state, phases, estimated person-days and pricing.

  3. Technical implementation

    Our team

    We deliver the approved phases: environment security, access management, monitoring, backups and recovery procedures as required. We document the changes.

    Measures under the approved plan

  4. Independent assessment

    Auditor

    The audit is carried out by an independent auditor you contract directly. We prepare the evidence and cooperate during the audit.

  5. Operational care

    Our team

    After launch, we continue with monitoring, updates and remediation under the operations agreement.

Example of our work

A system for managing security obligations in public administration

A system for recording, managing and reporting NIS2 security measures for a public administration body. Obligations and evidence sit in one place.

6 mo.
to deployment
3 areas
records, management, reporting
Frequently asked questions

Questions? Ask us.

Not finding your answer? We will gladly give it to you on a no-obligation consultation.

Ask directly
Does NIS2 apply to our organisation?

The Act covers companies and organisations in the sectors listed in its annexes that meet its conditions. If you supply an operator and your work touches its systems, you sign a contract on security measures with it and the operator may audit you. Check with your legal adviser whether the Act applies to you. In the consultation we tell you what it means for your systems technically.

How long does the preparation take?

It depends on the number of systems and what you already have in place. After the gap analysis you get a plan with the order of the measures and an estimate of time and cost.

What do we need for the first consultation?

Describe the systems you use and why you are considering preparation. Tell us about any audit findings or customer requirements.

Do you carry out the cybersecurity audit?

No. The audit is carried out by an independent auditor, and its outcome is theirs to determine. We put the measures in place, document them and cooperate during the audit.

Is the initial analysis paid?

The initial 30-minute consultation is free. A smaller analysis may also be free. For a larger one we typically split the cost roughly in half, and you know the scope, outputs and price before we start. You then order delivery in phases against the priced plan.

Can you help after the audit?

Yes. We can continue with remediation, monitoring and updates as agreed. An operating agreement sets the scope, price, response times and terms of care.

A first step without commitment

Let’s start with what your system needs.

In 30 minutes we go through your brief and propose the next step.

  1. Within one working day we reply and suggest a time.
  2. We will discuss your goal, current situation and open questions.
  3. You get a proposed next step: a quote, or an assessment priced up front.

Arrange a free consultation

You do not need any documents for the first conversation.

Just your name, company and email are required. Everything else is optional.

A short description is enough. We discuss documents and access after agreeing confidentiality.

Add a phone number or budget (optional)

This is your planned project budget, not the price of the consultation or assessment.

By submitting you acknowledge the processing of your data under the Personal Data Processing Policy.