Comprehensive NIS2 / UKSC Implementation

Professional audit and solution implementation
Support Online provides full support throughout the process of achieving NIS2 / UKSC (National Cybersecurity System Act) compliance—from the initial analysis and action plan preparation to the implementation of IT solutions and required documentation. NIS2 is an EU regulation that significantly raises cybersecurity requirements. In Poland, it is implemented through the UKSC Act, covering a wide range of public and private entities.

Check if your company falls under the NIS2 / UKSC Directive
HOW WE PREPARE COMPANIES FOR UKSC
5 Steps
1 Free Initial Audit
An indicative NIS2 / UKSC readiness assessment. It highlights key gaps and the direction for action, without the detailed analysis and formal verification required in a full audit.
2 Full compliance audit
Assessment of the current level of alignment with UKSC / NIS2 requirements. Identification of gaps and risks.
3 Roadmap and Pricing
Action plan with priorities, timeline, and pricing for each implementation.
4 Technical and Legal Implementation
Implementation of required solutions: security controls, monitoring, access management, procedures, and documentation.
5 Maintaining Continuous Compliance
24/7 Monitoring and 24/7 SOC, policy updates, incident response.
Scope of support
Our approach to technology is built on creating security foundations that harmoniously combine innovation with uncompromised protection of digital assets.
Technical Area and Infrastructure
Corporate network and remote access security Implementation of SIEM, SOC, and monitoring systems Vulnerability management and penetration testing Data encryption and backups Business continuity plans (BCP/DRP) IT asset inventory and management

Coroczne szkolenia dla członków zarządu

Annual training – a new obligation for Management Board members

Under the UKSC, the Management Board* is obliged to undergo appropriate cybersecurity training once a year. Training organised by Support Online is delivered by experts combining legal and IT knowledge. Without unnecessary technical nomenclature, and referring to the business perspective, they explain how to understand one's own obligations under the UKSC and how to reduce the financial and organisational risk resulting from non-compliance.

Participation in the training is documented, and the participant receives a personalised certificate confirming the fulfilment of the obligation in accordance with Art. 8e of the KSC Act.

*see FAQ: What does the personal liability of the entity's manager and management board mean under the UKSC?

Ask about our training offer for Management Boards
Who does UKSC (NIS2) apply to? Approximately 40,000 organizations will be subject to UKSC requirements.
Does this include your company?
Sectors covered by UKSC *
Energy Transport Banking and Finance Digital Infrastructure Healthcare IT/ICT Service Providers Food Production Chemicals and Pharmaceuticals Postal Services Waste Management Nuclear Energy Investments Water and Wastewater Management Manufacturing of Selected Products Digital Service Providers Scientific Research Public Administration (Selected Entities)
Check if you are subject to NIS2 / Cybersecurity Regulations

Answer a few questions to receive an initial evaluation. Free and without registration.

The Cybersecurity Act implementing the NIS2 directive applies in Poland from April 3, 2026. Companies in affected sectors have 6 months for self-identification — without official notification.

* The result is an initial automated qualification based solely on data declared by the user. It does not constitute official legal advice or confirmation of coverage under NIS2 / KSC. In case of doubt, we recommend consulting the relevant legal texts directly and seeking legal advice.

Step 1 of 3: Basic details

How many people does your company employ (including corporate group)?

NIS2 generally applies to companies employing over 50 people. If part of a group, the size of the whole group applies.
Fewer than 50
50–249
250 or more
Part of a corporate group — not sure how to calculate

Which main sector does your company operate in?

Step 2 of 3: Detailed qualification

Answer the following questions to get an accurate assessment.

Formal criteria

Below 2M EUR
2–10M EUR
Above 10M EUR
Prefer not to say
Only in Poland or EU
Mainly in Poland or EU
Mainly outside Poland and EU
Mainly outside Poland and EU

Organization role

Yes, directly
Possibly, indirectly
No
Yes
Don't know
No

Step 3 of 3: Your result is ready

Based on your answers, we prepared an initial evaluation. Fill in details to view results and recommendations.

Ważne terminy i obowiązki Spełnianie kryteriów UKSC wiąże się z konkretnymi terminami. Sprawdź w jakim czasie złożyć wniosek o wpis lub jego zmianę.
6 miesięcy
Wniosek o wpis do wykazu Od dnia spełnienia przesłanek uznania za przedmiot kluczowy lub ważny.
14 dni
Wniosek o zmianę wpisu Od dnia zmiany danych objętych wpisem (art. 7 ust. 2 pkt 1-18).
Free Initial Audit
We will conduct an initial compliance assessment, highlight key gaps, and outline a clear action plan. We will evaluate the overall implementation scope and provide an estimated cost of compliance.
Request a free consultation
UKSC / NIS2 is not just

IT

- it is also

law

We help clients become 100% prepared for UKSC requirements from both an IT and legal perspective. Our goal is to mitigate legal and financial risk for our clients. That is why we implement UKSC and NIS2 requirements in partnership with a team of lawyers specializing in new technology law.

 

A single, unified approach – connecting IT and legal requirements seamlessly

Certainty that implemented solutions are technically sound and fully compliant with regulations

Complete documentation tailored for inspections and audits

Clear operational procedures for handling incidents and breaches
Why choose us?
Continuous ISO 27001 Certification for 10 Years
Official proof that we adhere to the highest international information security standards. Furthermore, the NIS2 directive and UKSC act were modeled directly on ISO 27001. We bring a decade of practical experience in maintaining regulatory compliance.
Efficient Implementation Backed by a Decade of Experience
Because UKSC heavily relies on the framework and controls of ISO 27001, we implement the new legislative requirements faster and more securely. We have refined these enterprise-grade standards over ten years.
In-House ISO/IEC 27001:2022 Lead Auditors
Our team includes certified ISO/IEC 27001:2022 Lead Auditors. You gain hands-on security architects, not theorists. They quickly identify potential vulnerabilities long before a malicious actor can exploit them.
Peace of Mind Through Total Control
To maintain our ISO 27001 certification, we undergo rigorous annual security audits. We know exactly how to prepare your organization to effortlessly pass strict regulatory inspections and cross-audits under UKSC.
Real Business Needs, Practical Solutions
A certified auditor separates unnecessary bureaucracy from genuine protection. We tailor procedures to support your business operations rather than hinder your workflow, delivering an effective security system that protects both your operations
and budget.

Integrated Service

covering UKSC and NIS2 requirements – IT and legal support. Meet our legal experts.

Aleksandra Kuranda

Legal Counsel
Aleksandra Kuranda

Specializes in ongoing legal services for businesses and local government units, with particular emphasis on construction contracts, IT implementation and maintenance agreements, as well as copyright law. In her practice, she supports clients in tailoring contracts and internal procedures to comply with Polish and EU regulations.

Aleksandra Kucharska

Attorney-at-Law
Aleksandra Kucharska

Specializes in corporate legal advisory. She leads a law firm assisting businesses in implementing key regulations across emerging tech law (including AI), personal data protection, and IT security frameworks (also in terms of protecting trade secrets). She effectively guides organizations in fulfilling GDPR requirements.

GP Partners Gawroński, Biernatowski sp.k. Law Firm

Ranks among top technology law firms. Specializes in implementing regulations and standards for information security, data protection, and business continuity. GP Partners lawyers hold ISO 27001 Lead Auditor certificates from Military University of Technology, a Personal Data Protection Office Award, and authored prominent publications on cybersecurity and data protection, including the bestseller "GDPR. A Guide with Templates".

Timeline for UKSC Implementation in Your Organization
03/04/2026
Entry into force of UKSC
03/10/2026
Registration deadline
[Self-identification window]
01
02
03
04
05
07/05/2026
Launch of self-registration in System S46
[Self-identification window]
03/04/2027
End of the transition period
(obligation enforcement)
[Post self-identification: IT audit phase, gap assessment, and compliance remediation]
03/04/2028
Enforcement of financial penalties
and first ISMS audit
01
03/04/2026
Entry into force of UKSC
02
07/05/2026
Launch of self-registration in System S46
[Self-identification window]
03
03/10/2026
Registration deadline
[Self-identification window]
04
03/04/2027
End of the transition period (obligation enforcement)
[Post self-identification: IT audit phase, gap assessment, and compliance remediation]
05
03/04/2028
Enforcement of financial penalties and first ISMS audit
Find out how we can
help your business Order a free consultation
Your IT.
our
support.
Contact us

The administrator of your personal data is Support Online sp. z o.o. Your personal data will be processed to respond to your inquiry and, if you consent, also to send the SOL newsletter. You can read about the detailed rules for personal data processing by our organization in our Privacy Policy.

FAQ
Free consultation arrow only
call 22 335 28 00
arrow top