NÚKIB supervisory
activities in 2023
In 2023, NÚKIB’s inspection and audit activities were influenced, as in
2022, by an escalating geopolitical situation, prompting a continued
focus on examining the cybersecurity of key entities that support state
functioning and provide essential services to citizens.
A total of twenty audits and inspections were carried out under the Act on Cybersecurity and its Implementing Decree No. 82/2018 Coll., on security measures, cybersecurity incidents, reactive measures, cybersecurity reporting requirements and
data disposal (the Cybersecurity Decree), as amended.
In addition to standard inspections, a comprehensive audit was also conducted. This
audit exceeds the verification of organisational status through traditional surveys,
interviews and device configuration checks
and includes penetration testing, vulnerability scanning and tabletop exercises.
Multiple NÚKIB departments, including the Audit Department, Government CERT,
and the Exercise and Education Department, collaborate on these comprehensive
audits, providing organisations with thorough feedback on their cybersecurity
status and preparedness for potential incidents.
In cooperation with CZ.NIC, an audit of the gov.cz
domain was also conducted in accordance with
the Government of the Czech Republic’s Resolution No. 23 of January 11, 2023. This resolution
pertains to the intention to migrate to a uniform
domain and the establishment of a uniform visual
identity for central government bodies.
42