NIS2 · ZInfV-1
Public administration
Central and regional government bodies are named in NIS2 and carried into Slovenian law by ZInfV-1, alongside the data protection duties every public body already has.
WHAT MAKES THIS SECTOR DIFFERENT
Where the pressure actually comes from
Public bodies are procured against, which means the security requirement usually arrives as a tender clause rather than as a risk decision. That is survivable, but it produces estates assembled from whatever won on price, with no single view of what is exposed. The first useful step is almost always an inventory, not a product.
WHICH RULES CATCH YOU
Start here, in this order
NIS2 / ZInfV-1
Slovenia's Information Security Act, in force since 19 June 2025, took the number of obliged organisations from roughly 100 to roughly 1,000. Risk measures, incident reporting, supply-chain security and training, supervised by URSIV.
Read more In force nowGDPR / ZVOP-2
The oldest of these and still the most enforced. ZVOP-2 has been the Slovenian implementing act since January 2023, supervised by the Informacijski pooblaščenec. A breach exposing personal data is reportable within 72 hours whether or not ZInfV-1 also catches you — one incident, two clocks, two regulators.
Read more Contract requirementISO/IEC 27001
Not a law but a contract requirement: increasingly the price of bidding at all. SIST EN ISO/IEC 27001:2023 is the Slovenian adoption. We take organisations from gap analysis to a certifiable management system.
Read moreWHAT WE DO ABOUT IT
The three that matter most here
Security Operations Center
Analysts watching your estate around the clock, with the tooling and the honeypots to see an intrusion while it is still an intrusion and not yet a breach.
Read more VMVulnerability management
Continuous discovery, prioritised by what is actually reachable and actually exploited — not by a scanner dumping ten thousand findings on your team.
Read more IRIncident response
Containment, eradication and recovery, on site if it needs to be. The 24-hour clock in the law starts the moment you notice, not the moment you call.
Read more