Background

The European Union has introduced new regulations on data protection and cybersecurity. The NIS2 Directive, for example, requires operators of critical and important services to strengthen their cybersecurity measures and report significant incidents. Similarly, the Cyber Resilience Act establishes mandatory cybersecurity requirements for products with digital elements, including most connected hardware and software sold within the EU.

For many small and medium-sized enterprises (SMEs), however, complying with these regulations can be challenging. They often lack the resources to dedicate personnel to continuously monitoring regulatory developments and ensuring that all requirements are met.

Project Content

We aim to create system that enables small and medium-sized enterprises (SMEs) to assess the security of their computer networks and connected devices. To achieve this, we are developing an easy-to-use web application that performs a broad range of security and penetration tests based on information provided by the user, such as an IP address or a range of IP addresses.

The collected data is analysed statistically, and the system generates a report on the security status of the company's network. Where possible, the report also provides recommendations for mitigating identified risks and improving overall security.

In summary, the tool helps organisations identify vulnerabilities in their networks and offers practical guidance on the measures needed to address them.

Outcome

At the end of the project, we will provide a web application that enables companies to assess whether the security status of their IT systems aligns with relevant EU regulations. We place great emphasis on ensuring that the generated reports are not only useful for IT experts but also understandable to company managers and decision-makers.

In this first phase, our focus is on SMEs in South Bohemia and Lower Austria. In addition to providing companies with a practical tool for improving their cybersecurity, the project will also generate valuable insights into the overall security status of enterprise networks and IT systems across both regions.