NIS2 analysis: where do you have gaps in relation to Act No. 264/2025 Coll.?

A gap analysis compares the actual state with legal requirements. The output is a remediation plan, not a general report.

Non-binding consultation

NIS2 / Act No. 264/2025 Coll.

What a NIS2 gap analysis assesses

We compare the actual state of your cybersecurity with the requirements of Act 264/2025 Coll. And the regulations of NÚKIB. Output: an overview of gaps, risks and a plan to close them.

Classification and registration

Do you fall under the lower or higher obligation regime? Registration with NÚKIB.

Risk and asset management

Asset inventory, risk analysis, security policies and roles.

Technical measures

Access controls, logging, backups, encryption, segmentation, detection.

Supply chain

Contracts and safety requirements for suppliers.

Incident reporting

Reporting processes and deadlines, linkage to incident response.

Operational continuity

Renovation plans, testing, management responsibilities.

Outputs

What you receive

GAP report - gaps relative to Act No. 264/2025 Coll. With a risk level.
Remedial Plan - specific steps with priorities and deadlines.
Background for management - summary for investment decisions and responsibilities.

Not sure if you fall under NIS2 at all? Find out for free in 10 minutes on secureon.cz. NIS2OK.czImplementation of these measures will be covered from penetration testing through to the SOC.