Comprehensive NIS2 / UKSC Implementation

Professional audit and solution implementation
Support Online provides full support throughout the process of achieving NIS2 / UKSC (National Cybersecurity System Act) compliance—from the initial analysis and action plan preparation to the implementation of IT solutions and required documentation. NIS2 is an EU regulation that significantly raises cybersecurity requirements. In Poland, it is implemented through the UKSC Act, covering a wide range of public and private entities.

Check if your company falls under the NIS2 / UKSC Directive
Only one month left
for UKSC self-identification – Oct 3, 2026
Does your company fall under the new Act on the National Cybersecurity System? If you haven't checked yet, this is your last chance to do so.

By October 3, 2026, entities that meet the criteria for UKSC scope must complete self-identification and register in the KSC Register*. The challenge is that answering "does this apply to us?" is not always straightforward, as it spans both IT and legal considerations.

Together with a specialized legal team, we guide organizations through the entire self-identification process.

Remember that companies are required to independently evaluate whether they fall under UKSC scope*. If you haven't done so yet – do not assume that UKSC doesn't apply to you.

*Excludes entities officially registered ex officio by regulatory authorities.

30 minutes to help you determine if your company falls under UKSC.

Join our 30-minute webinar on UKSC self-identification. Clear, practical guidance with no legal jargon or unnecessary technicalities.

You will learn:

  • What your company needs to do before October 3rd,
  • How to verify whether you fall under these regulations,
  • What action steps to take if you are subject to the act.

If you have any doubts about whether UKSC applies to your organization

Register for the webinar

HOW WE PREPARE COMPANIES FOR UKSC
5 Steps
1 Free Initial Audit
An indicative NIS2 / UKSC readiness assessment. It highlights key gaps and the direction for action, without the detailed analysis and formal verification required in a full audit.
2 Full compliance audit
Assessment of the current level of alignment with UKSC / NIS2 requirements. Identification of gaps and risks.
3 Roadmap and Pricing
Action plan with priorities, timeline, and pricing for each implementation.
4 Technical and Legal Implementation
Implementation of required solutions: security controls, monitoring, access management, procedures, and documentation.
5 Maintaining Continuous Compliance
24/7 Monitoring and 24/7 SOC, policy updates, incident response.
Who does UKSC (NIS2) apply to? Approximately 40,000 organizations will be subject to UKSC requirements.
Does this include your company?
Sectors covered by UKSC *
Energy Transport Banking and Finance Digital Infrastructure Healthcare IT/ICT Service Providers Food Production Chemicals and Pharmaceuticals Postal Services Waste Management Nuclear Energy Investments Water and Wastewater Management Manufacturing of Selected Products Digital Service Providers Scientific Research Public Administration (Selected Entities)
Check if you are subject to NIS2 / Cybersecurity Regulations

Answer a few questions to receive an initial evaluation. Free and without registration.

The Cybersecurity Act implementing the NIS2 directive applies in Poland from April 3, 2026. Companies in affected sectors have 6 months for self-identification — without official notification.

* The result is an initial automated qualification based solely on data declared by the user. It does not constitute official legal advice or confirmation of coverage under NIS2 / KSC. In case of doubt, we recommend consulting the relevant legal texts directly and seeking legal advice.

Step 1 of 3: Basic details

How many people does your company employ (including corporate group)?

NIS2 generally applies to companies employing over 50 people. If part of a group, the size of the whole group applies.
Fewer than 50
50–249
250 or more
Part of a corporate group — not sure how to calculate

Which main sector does your company operate in?

Step 2 of 3: Detailed qualification

Answer the following questions to get an accurate assessment.

Formal criteria

Below 2M EUR
2–10M EUR
Above 10M EUR
Prefer not to say
Only in Poland or EU
Mainly in Poland or EU
Mainly outside Poland and EU
Mainly outside Poland and EU

Organization role

Yes, directly
Possibly, indirectly
No
Yes
Don't know
No

Step 3 of 3: Your result is ready

Based on your answers, we prepared an initial evaluation. Fill in details to view results and recommendations.

Scope of support
Our approach to technology is built on creating security foundations that harmoniously combine innovation with uncompromised protection of digital assets.
Technical Area and Infrastructure
Corporate network and remote access security Implementation of SIEM, SOC, and monitoring systems Vulnerability management and penetration testing Data encryption and backups Business continuity plans (BCP/DRP) IT asset inventory and management

Free Initial Audit
We will conduct an initial compliance assessment, highlight key gaps, and outline a clear action plan. We will evaluate the overall implementation scope and provide an estimated cost of compliance.
Request a free consultation
UKSC / NIS2 is not just

IT

- it is also

law

We help clients become 100% prepared for UKSC requirements from both an IT and legal perspective. Our goal is to mitigate legal and financial risk for our clients. That is why we implement UKSC and NIS2 requirements in partnership with a team of lawyers specializing in new technology law.

 

A single, unified approach – connecting IT and legal requirements seamlessly

Certainty that implemented solutions are technically sound and fully compliant with regulations

Complete documentation tailored for inspections and audits

Clear operational procedures for handling incidents and breaches
Why choose us?
Continuous ISO 27001 Certification for 10 Years
Official proof that we adhere to the highest international information security standards. Furthermore, the NIS2 directive and UKSC act were modeled directly on ISO 27001. We bring a decade of practical experience in maintaining regulatory compliance.
Efficient Implementation Backed by a Decade of Experience
Because UKSC heavily relies on the framework and controls of ISO 27001, we implement the new legislative requirements faster and more securely. We have refined these enterprise-grade standards over ten years.
In-House ISO/IEC 27001:2022 Lead Auditors
Our team includes certified ISO/IEC 27001:2022 Lead Auditors. You gain hands-on security architects, not theorists. They quickly identify potential vulnerabilities long before a malicious actor can exploit them.
Peace of Mind Through Total Control
To maintain our ISO 27001 certification, we undergo rigorous annual security audits. We know exactly how to prepare your organization to effortlessly pass strict regulatory inspections and cross-audits under UKSC.
Real Business Needs, Practical Solutions
A certified auditor separates unnecessary bureaucracy from genuine protection. We tailor procedures to support your business operations rather than hinder your workflow, delivering an effective security system that protects both your operations
and budget.

Integrated Service

covering UKSC and NIS2 requirements – IT and legal support. Meet our legal experts.

Aleksandra Kuranda

Legal Counsel
Aleksandra Kuranda

Specializes in ongoing legal services for businesses and local government units, with particular emphasis on construction contracts, IT implementation and maintenance agreements, as well as copyright law. In her practice, she supports clients in tailoring contracts and internal procedures to comply with Polish and EU regulations.

Aleksandra Kucharska

Attorney-at-Law
Aleksandra Kucharska

Specializes in corporate legal advisory. She leads a law firm assisting businesses in implementing key regulations across emerging tech law (including AI), personal data protection, and IT security frameworks (also in terms of protecting trade secrets). She effectively guides organizations in fulfilling GDPR requirements.

GP Partners Gawroński, Biernatowski sp.k. Law Firm

Ranks among top technology law firms. Specializes in implementing regulations and standards for information security, data protection, and business continuity. GP Partners lawyers hold ISO 27001 Lead Auditor certificates from Military University of Technology, a Personal Data Protection Office Award, and authored prominent publications on cybersecurity and data protection, including the bestseller "GDPR. A Guide with Templates".

Timeline for UKSC Implementation in Your Organization
03/04/2026
Entry into force of UKSC
03/10/2026
Registration deadline
[Self-identification window]
01
02
03
04
05
07/05/2026
Launch of self-registration in System S46
[Self-identification window]
03/04/2027
End of the transition period
(obligation enforcement)
[Post self-identification: IT audit phase, gap assessment, and compliance remediation]
03/04/2028
Enforcement of financial penalties
and first ISMS audit
01
03/04/2026
Entry into force of UKSC
02
07/05/2026
Launch of self-registration in System S46
[Self-identification window]
03
03/10/2026
Registration deadline
[Self-identification window]
04
03/04/2027
End of the transition period (obligation enforcement)
[Post self-identification: IT audit phase, gap assessment, and compliance remediation]
05
03/04/2028
Enforcement of financial penalties and first ISMS audit
Find out how we can
help your business Order a free consultation
Your IT.
our
support.
Contact us

The administrator of your personal data is Support Online sp. z o.o. Your personal data will be processed to respond to your inquiry and, if you consent, also to send the SOL newsletter. You can read about the detailed rules for personal data processing by our organization in our Privacy Policy.

FAQ