An important step for Slovakia’s cybersecurity

On 28 November 2024, the National Council of the Slovak Republic approved a significant amendment to the Cyber Security Act, which will enter into force on 1. January 2025. The amendment received the support of 117 members of Parliament and represents a key step towards strengthening security in the digital space. Slovakia is the fourth EU Member State which has transposed the NIS2 Directive into local law.

Work on the necessary regulations are already underway and will soon be submitted to the legislative approval process. This change is necessary for building a cyber-strong environment in Slovakia and within the European Union.

What does the amendment to the law bring?

• Although it is not a fundamental revolution, the amendment significantly contributes to reducing the risks associated with technological development, digitization and increases the overall level of cyber security.
• A new way to identify obliged entities – Operators of essential services will be identified according to specific criteria, such as the size of the organization. The scope of the law will be extended to include new sectors and regulated services.

• Definition of critical core service – A new way of assessing the risk and criticality of entities is being introduced, which will affect their duties, security measures, audits and control.

• Changes in security measures – The measures will be in line with the NIS2 standard and will introduce minimum cyber hygiene. The categorization and classification of information systems will be replaced by risk analysis, which will become a universal tool for the application of measures. Responsibility for the implementation of the measures will also be extended to providers in the supply chain.

• More efficient information sharing – The system for reporting threats, vulnerabilities and cyber incidents will be improved, contributing to better awareness and the ability of entities to prevent incidents.

• Modernisation of the sanction mechanism – Introduction of a more effective system of fines and a new form of administrative sanctioning.

This amendment is a significant step forward for protecting our digital future.