Operationalizing Regulatory Security Requirements
Cybersecurity manager role, architecture, risk management and implementation of measures including resilience of critical infrastructure.
MKB / ZoKB & SECRET & Local LLM
Sensitive projects under your own control.
I help organisations worldwide with cybersecurity management and architecture, undertake classified projects at EU SECRET and NATO SECRET levels, and deploy local LLMs that keep sensitive data out of public clouds.
Expertise, trust and data control
CISAISO 27001ZoKB / NIS2KI / CEREU SECRETNATO SECRETLOCAL LLM
Connected expertise
Three pillars.
A unified security offering.
Regulatory obligations, working with classified information and using AI are not separate disciplines. Trust, responsibility and the ability to keep sensitive data under your own control bind them together.
Ability to work on classified projects
EU SECRET and NATO SECRET clearances enable participation in classified projects with the appropriate security regime and requirements for protection of classified information.
AI without data leaving your environment
Language models can run within the organization’s infrastructure. Prompts, documents and results therefore need not be sent to public cloud services.
Sensitive data under controlRegulation & authorisation & technology
Security roles
From responsibility
to outcome.
Documentation is essential but does not protect by itself. Its purpose is a security system that owners can manage, risk responsibilities and operates in daily operations.
Cybersecurity manager
Security management in the context of the organization’s goals, real risks and available resources.
- strategy, roles and responsibilities
- risk assessment and priorities
- communication with leadership
- coordination of suppliers and teams
Security architect
Design of clear and maintainable architecture that connects technologies, processes and operational constraints.
- security principles and patterns
- segmentation and access control
- identity, logging and monitoring
- evaluation of designs and changes
Implementation measures
Recommendations for concrete steps, configuration, accountability and verifiable outcomes.
- implementation roadmap
- hardening and technical controls
- operational procedures and automation
- verification of activities
ZoKB & Critical Infrastructure
Security combined with service resilience.
I help connect the operational cybersecurity regime with organisational resilience and continuity of essential services. Both regulatory regimes have their own scope, but in practice they intersect in risk management, suppliers, incidents and operational readiness.
This is not legal advice; the focus is cybersecurity management, security architecture, and practical implementation of measures for significant and critical organisations.
Czech Cybersecurity Act
Basic framework of obligations, regulated services, security measures and incident reporting.
Decree on Regulated Services
Determines whether an organisation and its services fall under regulation and which regime applies.
Decree on Security Measures - Higher-Obligations Regime
Organisational and technical measures including security roles, ISMS, risk management and architecture.
Czech Critical Infrastructure Act
Resilience of the entity as a whole, continuity of essential services and preparedness for disruptions affecting critical cyber risks.
Decree on the NÚKIB Portal
Practical procedural requirements for communication and meeting selected obligations towards NÚKIB.