AI, RPA and OCR Assessments
We identify where artificial intelligence, robotic process automation or document data extraction can help. We assess the benefits, data requirements and risks.
Security Management
From assessing risks to protecting day-to-day operations.
We help businesses and public institutions protect their people, data and operations. We identify weaknesses and build a plan that spells out what to address first, where to invest and who is responsible for each fix.
Security Management Services
We tailor the scope to your operational priorities, regulatory requirements and team capacity.
Cybersecurity Audits
We review technical and organisational measures, their documentation and how they work in practice. We rank findings by severity and recommend fixes.
Operational and Risk Assessments
We map hardware, software, networks, assets, processes and roles. We assess where failures or incidents could disrupt critical services.
Penetration Testing and Ethical Hacking
We assess the resilience of selected systems within an agreed and authorised scope. We explain the results to leadership and technical teams and recommend how to address the findings.
Protection of Publicly Accessible Sites
We assess public access, operating procedures and staff preparedness. Training can cover the Run, Hide, Fight approach.
Incident Monitoring and SOC Analytics
We monitor warning signs, use trends to assess incident risk and analyse security events. We help define how incidents are escalated and handled.
Security Deployment Planning
We plan the rollout of hardware and software and coordinate technical dependencies, suppliers, testing and handover to operations.
Security Policies and Staff Training
We write internal policies, assign responsibilities and provide training or e-learning. By agreement, we can take on some security management tasks, periodic reviews and reporting. We also discuss the scope of liability insurance when agreeing on services.
Operational Review
Information Security Gap Analysis
We compare your current practices with applicable requirements and agreed security goals. We review how information is protected across systems and in day-to-day work.
What we assess
- Use of IT equipment
- Configuration of communications systems and networks
- Information protection across IT systems
- Physical security
- Personnel security and responsibilities
- Security procedures and how staff apply them
You receive a list of gaps and a remediation plan. For each proposed measure, we set priorities, assign responsibilities and recommend timelines.
GDPR and Cybersecurity
An incident may trigger several reporting obligations. Decide in advance who will assess the incident, whom they should notify and by when.
GDPR
When a personal data breach poses a risk to people's rights and freedoms, the controller must notify the supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it.
If the breach is likely to pose a high risk, the controller is generally also required to inform the affected people without undue delay. For certain infringements, the maximum fine is EUR 20 million or, for a business, 4% of worldwide turnover in the previous financial year, whichever is higher.
EDPB guidance on data breachesNIS2 and Czech Law
The Czech Cybersecurity Act, No. 264/2025 Coll., sets requirements for providers of regulated services. Security measures and reporting rules depend on the service provided and the applicable regime.
We help determine whether the rules apply to you and turn the relevant requirements into operating procedures, named roles and an implementation plan.
NÚKIB guidance on incident reportingAnonymous Survey
Cybercrime
Share your experience with cybercrime. The survey opens in Google Forms.
Where should you start protecting your operations?
In an initial consultation, we discuss what you need to protect, how an outage or incident could affect you and which area to assess first.
Can you read the message in binary?
01010100 01101000 01100001 01101110 01101011 00100000 01111001 01101111 01110101 00100000 01100110 01101111 01110010 00100000 01110110 01101001 01110011 01101001 01110100 01101001 01101110 01100111 00101110
Reveal the answer
Thank you for visiting.
