Compliance s novým kybernetickým zákonem jako součást řízení IT

In recent years, cybersecurity has evolved from a purely technical domain into a strategic management concern, driven in part by increasingly stringent European regulation. This thesis addresses the challenge of achieving compliance with the new Czech Cybersecurity Act (Act No. 264/2025 Coll.), which transposes the NIS2 Directive into Czech law and affects thousands of entities, many of which have not previously been subject to any cybersecurity regulation. First, the context of cybersecurity and the drivers behind regulatory changes are established through a SLEPT analysis. The transposition process of the NIS2 Directive across EU member states is then analysed and compared with the approach adopted by the Czech Republic. This is followed by an analysis of the requirements and impacts of the new Act, including the distinction between lower and higher obligation regimes. The aim of the thesis is to design a concept, a methodological approach, and a practical tool for achieving compliance with the Act, drawing on the principles of the COBIT 2019 framework. The proposed solution is therefore structured into three interconnected pillars - a concept defining the organisation's strategic approach to cybersecurity, a methodology outlining the process of achieving compliance, and a checklist translating the requirements of implementing decrees into a structured and interpreted format. The thesis also examines the role of Security Operations Centres in fulfilling regulatory obligations. The proposed solution is implemented in the Notion platform and validated through three case studies covering both obligation regimes and varying levels of organisational cybersecurity maturity.