NIS2 · CER
Energy
Electricity, gas, heating, oil and hydrogen are essential entities under NIS2, and the same operators fall under CER for physical resilience.
WHAT MAKES THIS SECTOR DIFFERENT
Where the pressure actually comes from
Generation and distribution run on control systems that predate the idea of an internet-facing estate, and which cannot simply be patched on a Tuesday. NIS2 does not accept that as an answer: it asks for risk management, supply-chain control and a 24-hour early warning on a significant incident, whatever the equipment underneath.
WHICH RULES CATCH YOU
Start here, in this order
NIS2 / ZInfV-1
Slovenia's Information Security Act, in force since 19 June 2025, took the number of obliged organisations from roughly 100 to roughly 1,000. Risk measures, incident reporting, supply-chain security and training, supervised by URSIV.
Read more Contract requirementISO/IEC 27001
Not a law but a contract requirement: increasingly the price of bidding at all. SIST EN ISO/IEC 27001:2023 is the Slovenian adoption. We take organisations from gap analysis to a certifiable management system.
Read more Draft in parliamentCER
The physical twin of NIS2: the same essential sectors, but resilience against sabotage, drones, natural hazards and insider threat rather than cyber alone. Slovenia had to transpose it by 17 October 2024 and has not yet; the draft is in the legislative process, so this is a deadline to plan for rather than one to report against.
Read moreWHAT WE DO ABOUT IT
The three that matter most here
Security Operations Center
Analysts watching your estate around the clock, with the tooling and the honeypots to see an intrusion while it is still an intrusion and not yet a breach.
Read more IoT / OTIoT and OT security
Cameras, controllers and machines that shipped with no security and cannot be patched. We segment them, watch them and stop them talking to strangers.
Read more IRIncident response
Containment, eradication and recovery, on site if it needs to be. The 24-hour clock in the law starts the moment you notice, not the moment you call.
Read more