RISKORIA ADVISING & PROFESSIONAL SERVICES D.O.O. · ZAGREB+385 97 737 1345INFO@RISKORIA.EU

An assistant for the Cyber Security Act.

Ask about your duties and get an answer written for your organisation’s profile, with a reference to the provision of the Act or the Regulation it rests on.

What the Copilot does

01

Chat

A question about the Act, the Regulation or your duties, answered with a reference to the provision.
02

Categorisation

Whether you are an essential or an important entity, and what follows from it.
03

Measures and duties

The thirteen measures and their sub-measures, broken down into what has to be done.
04

Self-assessment

A guided self-assessment following the guidance of the Information Systems Security Bureau.
05

Compliance plan

The order of steps towards compliance, and what is still missing.
06

Deadlines and incidents

Reporting deadlines for a significant incident and who has to be notified: an early warning within 24 hours, a notification within 72 hours and a final report within 30 days.

What the answers rest on

The Copilot answers from the text of these documents and states the provision each answer rests on: nineteen sectors from Annexes I and II of the Act, thirteen measures and ninety-nine sub-measures from Annex II of the Regulation, and 137 controls from Annex C of the Information Systems Security Bureau.

NN 14/2024Cyber Security ActNN 135/2024Cyber Security RegulationZSIS, v1.0Rules on security certification for cyber security auditsZSISGuidelines for cyber security self-assessment

An example answer

A question from an institution, and an answer with the provisions it rests on.

We are a hospital with 900 staff. Do we need an audit, and by when?

A hospital of that size is normally an essential entity in the healthcare sector. The audit is performed by a certified managed security service provider at least every two years. The measures were due within twelve months of the categorisation notice.

ZKS Art. 34(1)ZKS Art. 26(5)Regulation NN 135/2024, Annex II
HOW IT WORKS

Three steps

01

Set your profile

You pick your sector, category and level of measures, so every answer is written for that situation rather than in general.

02

Ask and look it up

You ask questions and open the text of the law next to each answer, without searching the official gazette.

03

Track compliance

You keep a plan of sub-measures and a self-assessment through to audit readiness.

What the Copilot does not do

01

It does not guess

When the Act, the Regulation and the documents of the Information Systems Security Bureau hold no answer, the Copilot says so plainly and points you to a conversation with us. An invented provision does more harm than no answer.
02

It is not legal advice

The answers are informative and meant for quick orientation, not legal advice on a specific case.
03

It does not assemble your evidence

The Copilot answers questions about the law. Arranging the evidence set and running an internal readiness check before an audit is work we do with you, on the audit readiness page.

Price and free trial

Ten queries over seven days, with no payment and no subscription. After that you buy query packages when you need them, rather than a monthly fee.

Readers of our materials get ten per cent off every query package. Quote the coupon at purchase; it also applies alongside the free trial.

Open the free trial
FREE TRIAL10 queries / 7 days
COUPONZKSPROMO

Frequently asked questions

The questions our clients ask most often.

Does the Copilot remember our data?

It does not. Queries are not used for training and are not linked to your organisation.

How long do purchased queries stay valid?

Twelve months from purchase.

How current is the legal base?

We maintain the base by hand and record the date each document was last changed.

Need an opinion on your own situation?

Half an hour, no obligation. The Copilot gives you the provision, and we tell you what it means for your organisation.

Book a callINFO@RISKORIA.EU · +385 97 737 1345