Audit připravenosti vybrané organizace na požadavky kladené směrnicí NIS2

The phenomenon of the digital economy is pushing for the integration of modern systems in order to achieve greater work efficiency. However, digitisation brings with it risks in the form of the possibility of misuse and hacking of these systems, which can threaten the national critical infrastructure itself. For this reason, the NIS 2 Directive has been introduced in the European Union to minimise these risks by imposing cyber security obligations. The aim of this thesis was to audit compliance with the requirements of the NIS 2 Directive as transposed into Czech legislation in a specific organisation. The aim was to determine the current state of the organisation's cybersecurity, whether the organisation meets the requirements imposed by the legislation and then to recommend measures to raise the level of cybersecurity to the state required by the legislation. The objectives were achieved by means of an audit based on risk analysis and Gap analysis, which looked for gaps between the current state of cybersecurity and the state required by the legislation. The audit found gaps in the organisation's cybersecurity and therefore non-compliance with the legislation. Based on the findings, specific recommendations were made to the organization to help bring the audited organization's cybersecurity level up to the desired state.