Menu
Contact
Menu

KSC act

Appropriate and proportionate technical, operational and organisational measures are necessary to manage the risks to the security of the networks and information systems used by these entities to carry out their activities or provide their services and to prevent or minimise the impact of incidents on the recipients of their services or on other services.

Act on the National Cybersecurity System

The amendment to the Act on the National Cybersecurity System (KSC) incorporates the requirements of the NIS2 Directive into Polish law. The new provisions impose obligations on critical and important entities related to risk management, incident reporting, and building resilience to cyber threats

We offercomprehensive support at every stage of preparation for the requirements of the KSC Act, including:

  • an analysis of whether the organization is subject to the provisions of the Act,
  • an assessment of the current level of cybersecurity and an analysis of vulnerabilities,
  • the development of a plan to comply with KSC requirements,
    support in implementing risk management and incident response processes,
  • support in preparing the required documentation and procedures,
  • assistance in implementing tools to support vulnerability management and security monitoring,
  • training for management and employees,
  • support during preparation for inspections and audits.

The attributes of information in an Information Security Management System, known as the CIA Triad (Confidentiality, Integrity, Availability), are well known. It is also essential that information used in cybersecurity processes—including those related to business continuity and incident management—possess three additional characteristics that determine its usefulness, meaning it must be:

Accurate/reliable
Quickly accessible
Ready for immediate use
The OpenBIZ teams prefer Tenable® software because it ensures that the information possesses these characteristics.

Collaboration Between OpenBIZ and DAPR (Using Red Into Green)

As with the DORA Regulation, if the implementation of KSC is to be carried out properly, technical teams should collaborate with legal teams. Bringing these two distinct worlds together is not easy, but with the right tools, it is possible.

Conducting a proper security inventory is crucial for determining where an organization stands and what to prioritize when implementing uKSC requirements. By combining Security Center Plus and RIG, we obtain a single risk table that includes both technical risks from Tenable systems and business information collected in the RIG system. This helps gather information about the most critical technical risks and key business processes.