Cybersecurity

We provide comprehensive support for meeting regulatory requirements, as well as the legal and business aspects of ongoing activities, with a broad focus on compliance in the area of information security (cybersecurity).

To ensure that our clients receive comprehensive and effective solutions tailored to their needs, our services are sometimes complemented by actions carried out in collaboration with specialized cybersecurity consulting entities (e.g., information security audits, ISO 27001, IT consulting).

In particular, our cybersecurity services include:

• Audits and ongoing advice to ensure compliance with cybersecurity regulations at the national level (National Cybersecurity System Act – KSC), European level (NIS, NIS2, DORA), and international level, taking into account sector-specific or industry-specific requirements (financial sector, industry, critical infrastructure), as well as recommendations and guidelines issued by regulators and supervisory authorities (KNF, EBA).
• Assistance in assessing and practically implementing the requirements arising from the National Cyber Security System (KSC) regulations.
• Support in the development and implementation of information security policies and procedures within organizations, in accordance with legal requirements, industry recommendations, standards, and current best practices.
• Comprehensive legal support in the event of cybersecurity incidents, including assistance with reporting incidents to relevant authorities and representation in proceedings related to information security.
• Security audits and advice on technical and IT aspects of cybersecurity, including the solutions and information security management systems used by the organization (service provided in conjunction with a specialist partner).
• Advice on information security compliance for IT cloud solutions, e-commerce, and remote working.
• Internal training sessions for organizations (employees and partners) on the legal aspects of cybersecurity, focusing particularly on obligations and principles arising from applicable laws, industry regulations, and internal policies and procedures.
• Advice and assistance on personal data protection and privacy issues related to cybersecurity.

• Cybersecurity policies and procedures
• Information security audits
• Cybersecurity incident management
• Internal training sesionss