Companies in regulated sectors
Entities to which the obligations apply directly.
Cyber security regulation under the NIS2 directive has widened the circle of obliged entities and added duties in risk management and incident reporting. The first step is to find out whether it applies to you.
What Issues Do Clients Come to Us With?
01
Uncertainty about scope
It is unclear whether your company falls within the regulated sectors and in which category.
02
Registration and contact with the authority
You need to handle registration and communication with the national cyber security authority.
03
Security risk management
Processes and internal roles are not set up.
04
Incident reporting
There are no procedures for reporting within the prescribed deadlines.
05
Requirements on suppliers
Security obligations need to be passed on through supplier contracts.
What exactly do we do for you?
Assessment of scope
We establish whether you are an obliged entity and to what extent.
Gap analysis
Comparison of your current state against the requirements.
Internal documentation
Preparation of procedures including incident reporting.
Supplier contracts
Adding security clauses to your contracts.
Management liability
Advice on the liability of governing bodies.
Who is this service intended for?
Suppliers to regulated entities
Companies to which the requirements are passed on contractually.
How the collaboration works
- 01
Initial assessment
We assess how the regulation applies to your company.
- 02
Gap analysis
We identify what needs to be added against the obligations.
- 03
Action plan
We prepare a plan with deadlines and responsibilities.
- 04
Implementation and review
We support implementation and verify that it works.
Our team
Why LEXANTE
Rebríček
#1Law firm #1
Hodnotenie
5.0Google rating
Google
Skúsenosť
50+Years of experience
Skúsenosť
16+Team members
Klient
1000+Satisfied clients
Rebríček
Ranked by Legal500 among the most promising law firms in Slovakia
Legal500
Skúsenosť
3Offices in 3 cities
Bratislava, Banská Bystrica, Košice
Skúsenosť
A team of attorneys, legal and business experts
Časté otázky k tejto službe
It depends on the sector, size, type of services provided and the company's specific position. The first step is therefore to assess whether the regulation applies to the particular organisation.
First, determine whether and to what extent the obligations apply to the company. Only then does it make sense to carry out a gap analysis and a plan of measures.
No. Besides technical measures, the regulation also affects internal processes, risk management, incidents, management liability and contractual relationships with suppliers.
In many cases, yes. Security requirements and obligations may need to be reflected in supplier contracts, SLAs, incident management and cooperation rules.
Mainly by assessing applicability, a legal gap analysis, preparing or reviewing documentation and contractual provisions, and setting up the legal part of the implementation plan.
Does NIS2 apply to you?
We will assess the scope of the regulation and prepare an action plan with deadlines.
Write to us
Contact us to schedule a consultation
- 01
Please briefly describe what you need help with.
- 02
We will contact you and suggest the best course of action.
