Studie dopadu zavádění NIS2 na organizace

Abstract

This bachelor thesis examines the impact of the NIS2 Directive implementation on organisations in the Czech Republic. It defines the theoretical foundations of cybersecurity and describes the legislative framework formed by the NIS2 Directive and Act No. 264/2025 Coll., on Cybersecurity. The thesis analyses current threats and statistical trends based on data from ENISA, NÚKIB and Eurostat. It evaluates the readiness of organisations for the implementation of the new regulation through secondary analysis of surveys and supervisory reports. Using a model example of a municipality with extended competence under the lower obligation regime, it demonstrates the practical procedure for implementing the requirements of the Cybersecurity Act. Based on the findings, it formulates practical recommendations for newly regulated entities in the areas of security management, organisational measures and training.