Understand what applies to your organisation. We connect NIS2 / ZKB and ISO 27001 requirements with risk management, implemented controls and evidence you can present at an audit.
For businesses, nonprofits and public administration.
The outputs we build with your team.
A risk register and a prioritised remediation plan.
Documented processes, clear roles and control owners.
Training records and evidence that controls are in place.
Internal audit findings and reporting for management.
We coordinate regulatory readiness and information security management around the same risks, people and evidence.
Understand your obligations. Implement the measures.
Build a system your organisation can maintain.
We begin with your current situation. The findings determine the scope, priorities and implementation schedule.
An applicability assessment, risk profile and remediation roadmap, presented to your management.
Interviews, documentation review and an assessment of existing controls.
Audit report, gaps and risk priorities.
We define the scope, owners, budget and milestones with your team.
A remediation roadmap and implementation schedule.
We prepare policies, establish processes and support technical controls.
Documentation, training records and implementation evidence.
We review effectiveness, identify remaining gaps and agree on follow-up support.
Audit findings, corrective actions and management reporting.
From core documentation to technical integration. We confirm the right package and any individual adjustments after the entry audit.
49 000 Kč
one-time implementation · excl. VAT
Core security policy, risk management plan, BCP/DR, NÚKIB/CSIRT incident reporting workflow and leadership (4h) & IT (8h) training.
129 000 Kč
one-time implementation · excl. VAT
Everything in START + operational SOPs (patching, PAM, change mgmt), quarterly internal audits, simulated NÚKIB regulatory audit, SIEM integration and annual phishing training.
249 000 Kč
one-time implementation · excl. VAT
Everything in BUSINESS + XRENN™ EdgeGuardian NIS2 offline AI hardware appliance, continuous network anomaly detection, automated audit logging and monthly executive dashboard.
Your organisation, suppliers and threats change. Monthly support keeps documentation, priorities and management decisions connected to those changes.
Connect the programme with penetration testing, staff training or EdgeGuardian integration as your needs grow.
2 900 Kč / month · excl. VAT
Legislative monitoring (NIS2, ZKB, ISO 27001), email support with 1-business-day SLA, and quarterly priority summary.
7 900 Kč / month · excl. VAT
Everything in BASIC + monthly 1-on-1 consultations (1h/mo), continuous policy revisions, risk adaptation and active OSINT monitoring and reporting (up to 10 domains included).
19 900 Kč / month · excl. VAT
Everything in PRO + weekly executive steering (30m/week), guaranteed 4-hour SLA, full outsourced compliance governance and regulator representation.
Regular domain monitoring and reporting for up to 10 domains is included in PRO and ELITE. For the entry audit and BASIC, it is available as an optional monthly add-on.
Optional add-on: 500 Kč / month · excl. VAT
Monitoring for up to 100 assets is planned and cannot be ordered yet.
Direct contact with the expert guarantor for ISO 27001 ISMS, new Czech Cyber Security Act (ZKB 264/2025 Sb.) / NIS2 compliance, penetration testing, and world-class AI security.
Whether you are addressing the requirements of the new Czech Cyber Security Act (ZKB 264/2025 Sb.), the European NIS2 directive, ISO/IEC 27001 certification, or securely deploying frontier AI models and offline EdgeGuardian appliances, send your project inquiry to schedule an expert consultation.
Information Security Management (ISMS), audit certification, and security policy implementation.
Master of Business Administration – strategic and technical cybersecurity governance.
Guarantor of compliance with the new Cyber Security Act and EU NIS2 directive.
World-class frontier LLM model security, AI Red Teaming, and EdgeAI defense.
