Compatibility Assessment Tool of security measures in the context of NIS2 Directive

Due to the continuously rising number of cyber threats in recent years, private companies and government institutions must constantly improve the security of their IT infrastructure. This can be achieved through various approaches and methods, such as network segmentation, access controls, and encryption. However, these measures are costly to implement and require significant professional capacity, which poses a particular problem for small and medium-sized enterprises that often lack established IT departments and adequate financial resources. At the end of 2022, the European Parliament approved the final text of the Directive on measures to ensure a high common level of cybersecurity in the Union, the so-called NIS2. This builds on the original NIS Directive by substantially deepening and broadening the rules for cybersecurity management by obliged entities. In the Czech Republic, up to 6000 entities, many of which are SMEs, will be subject to the directive. The purpose of this paper is to assess the potential impact of the NIS Directive on SMEs and outline the challenges they face in implementing the mandatory measures. The thesis will provide a theoretical insight into cybersecurity issues, an introduction to key standards such and a summary of existing tools for analyzing compliance with these standards. Based on these insights, the practical part of the thesis will develop a simple web-based tool specifically designed for SMEs to assess their compliance with the NIS Directive.