{"id":15352,"date":"2025-06-10T13:08:53","date_gmt":"2025-06-10T13:08:53","guid":{"rendered":"https:\/\/legacy.boit.cz\/nis2\/"},"modified":"2025-07-25T08:46:56","modified_gmt":"2025-07-25T08:46:56","slug":"nis2","status":"publish","type":"page","link":"https:\/\/legacy.boit.cz\/en\/nis2\/","title":{"rendered":"NIS2"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

NIS2 is not an incantation. It's a buzzword. But it's also the law. <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

We can’t solve all the world’s problems for you<\/strong>, but we can help you with what we are experts in. Confused by your obligations under the NIS2 Act? Leave it to us. We’ll guide you through the jungle as best we can – clearly, practically and without unnecessary panic. <\/p>

Whether you’re a city, a small business or a corporation, NIS2 can hit you harder than your morning batch of emails. And no, it’s not enough to have antivirus and a password of “1234”. You won’t get off that easy. The new cybersecurity law brings obligations that aren’t worth ignoring – whether for fines or reputation. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

What do we offer at BOIT Cyber Security?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t
\n
\n

Phishing tests<\/h3> <\/div>\n

We simulate real attacks so you know who’s ready – and more importantly, who’s not.<\/p>

Recommended frequency:<\/strong> 1-2 times a year<\/span> <\/p><\/div>

\n \n I want to test employees<\/span>\n <\/a>\n <\/div>\n <\/div>\n <\/div>\n\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t
\n
\n

Penetration tests<\/h3> <\/div>\n

Let’s see where you have weaknesses, like a hacker attack, but without the damage.<\/span><\/p>

Recommended frequency:<\/strong> once a year or after each major system change<\/span><\/p><\/div>

\n \n Order pentest<\/span>\n <\/a>\n <\/div>\n <\/div>\n <\/div>\n\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t
\n
\n

Employee training<\/h3> <\/div>\n

From basic awareness to CISO Academy. Online and face-to-face, interactive and without falling asleep. <\/span><\/p>

Recommended frequency:<\/strong> at least 1x per year + when new employees start<\/span><\/p><\/div>

\n \n Order training<\/span>\n <\/a>\n <\/div>\n <\/div>\n <\/div>\n\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t
\n
\n

Vulnerability scans<\/h3> <\/div>\n

We regularly look for holes in your shields so that you are always one step ahead of your attackers.<\/span><\/p>

Recommended frequency:<\/strong> monthly or quarterly<\/span><\/p><\/div>

\n \n Inquiry vulscan<\/span>\n <\/a>\n <\/div>\n <\/div>\n <\/div>\n\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Lower mode \u2260 no worry<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

…because the attacker doesn’t care that you’re “just” a small business.<\/p>

Even if your organisation is hit by a lower duty regime<\/strong>, it certainly doesn’t mean you can rely on luck and a firewall from 2009. While the law “only recommends” some things, the reality of cyber threats is uncompromising. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

What is “only recommended” but you should definitely do it:<\/h3>\n\n\n\n\n\n\n\n\n\n\n\n
Area<\/th>\nObligation in the lower regime<\/th>\nWhy do it anyway?<\/th>\n<\/tr>\n<\/thead>\n
Phishing tests<\/strong><\/td>\n\ud83d\udd04 Recommended<\/td>\nPeople are clicking where they shouldn’t. And the attackers know it. <\/td>\n<\/tr>\n
Penetration tests<\/strong><\/td>\n\ud83d\udd04 Recommended<\/td>\nYou’ll discover weaknesses before someone else does.<\/td>\n<\/tr>\n
Vulnerability scans<\/strong><\/td>\n\ud83d\udd04 Recommended<\/td>\nRegular monitoring = fast response.<\/td>\n<\/tr>\n
Employee training<\/strong><\/td>\n\ud83d\udd04 Recommended<\/td>\nThe biggest risk sits at the keyboard.<\/td>\n<\/tr>\n
Business Continuity Plan<\/strong><\/td>\n\ud83d\udd04 Recommended<\/td>\nWhen it crashes, you need to know what to do.<\/td>\n<\/tr>\n
Internal audits and testing<\/strong><\/td>\n\ud83d\udd04 Recommended<\/td>\nNo control, no certainty.<\/td>\n<\/tr>\n
Security documentation<\/strong><\/td>\n\u2705 Compulsory (in basic scope)<\/td>\nBut the better, the more peace of mind.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Why address this without a legal obligation?<\/h3>
  • The attacker doesn’t read the ordinances.<\/strong> He doesn’t care if you’re in lower or higher mode.<\/li>
  • Your customers and partners choose by trust.<\/strong> It is hard to build, but very easy to lose.<\/li>
  • Prevention is cheaper than a fine.<\/strong> And definitely cheaper than a service outage or data leak.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    nZKB: Practical guide for companies and institutions<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    Want to be clear about who NIS2 applies to, what exactly “lower” and “higher” mode means, and what all you need (or should) address? We’ve put together a handy e-book that explains it to you in a human, clear way and without unnecessary legalese. <\/p>

    \u2705 Who falls under regulation
    \u2705 What are the new obligations
    \u2705 What to do today, tomorrow and next month
    \u2705 The most common myths and mistakes
    \u2705 And most importantly: how to prepare in peace<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

    \n\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t