{"id":25338,"date":"2026-04-08T16:19:48","date_gmt":"2026-04-08T14:19:48","guid":{"rendered":"https:\/\/inteca.com\/?post_type=business-insights&#038;p=25338"},"modified":"2026-09-17T15:30:06","modified_gmt":"2026-09-17T13:30:06","slug":"analiza-ryzyka-w-cyberbezpieczenstwie","status":"publish","type":"business-insights","link":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/","title":{"rendered":"Analiza ryzyka w cyberbezpiecze\u0144stwie &#8211; metody i wymagania KSC \/ NIS2"},"content":{"rendered":"<style>.kadence-column25338_c05b9f-91 > .kt-inside-inner-col{padding-top:32px;padding-right:28px;padding-bottom:32px;padding-left:28px;}.kadence-column25338_c05b9f-91 > .kt-inside-inner-col{box-shadow:0px 0px 14px 0px rgba(0, 0, 0, 0.2);border-top:1px solid rgba(211,84,0,0.22);border-right:1px solid rgba(211,84,0,0.22);border-bottom:1px solid rgba(211,84,0,0.22);border-left:1px solid rgba(211,84,0,0.22);}.kadence-column25338_c05b9f-91 > .kt-inside-inner-col,.kadence-column25338_c05b9f-91 > .kt-inside-inner-col:before{border-top-left-radius:16px;border-top-right-radius:16px;border-bottom-right-radius:16px;border-bottom-left-radius:16px;}.kadence-column25338_c05b9f-91 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column25338_c05b9f-91 > .kt-inside-inner-col{flex-direction:column;}.kadence-column25338_c05b9f-91 > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column25338_c05b9f-91 > .kt-inside-inner-col{background-color:var(--global-palette8, #F7FAFC);}.kadence-column25338_c05b9f-91 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column25338_c05b9f-91{position:relative;}.kadence-column25338_c05b9f-91, .kt-inside-inner-col > .kadence-column25338_c05b9f-91:not(.specificity){margin-top:15px;margin-bottom:15px;}@media all and (max-width: 1024px){.kadence-column25338_c05b9f-91 > .kt-inside-inner-col{border-top:1px solid rgba(211,84,0,0.22);border-right:1px solid rgba(211,84,0,0.22);border-bottom:1px solid rgba(211,84,0,0.22);border-left:1px solid rgba(211,84,0,0.22);flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column25338_c05b9f-91 > .kt-inside-inner-col{border-top:1px solid rgba(211,84,0,0.22);border-right:1px solid rgba(211,84,0,0.22);border-bottom:1px solid rgba(211,84,0,0.22);border-left:1px solid rgba(211,84,0,0.22);flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column25338_c05b9f-91\"><div class=\"kt-inside-inner-col\"><style>.wp-block-kadence-advancedheading.kt-adv-heading25338_aa2d86-5e, .wp-block-kadence-advancedheading.kt-adv-heading25338_aa2d86-5e[data-kb-block=\"kb-adv-heading25338_aa2d86-5e\"]{margin-bottom:8px;font-size:11px;font-weight:600;font-style:normal;font-family:Poppins;text-transform:uppercase;letter-spacing:1.5px;}.wp-block-kadence-advancedheading.kt-adv-heading25338_aa2d86-5e mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading25338_aa2d86-5e[data-kb-block=\"kb-adv-heading25338_aa2d86-5e\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading25338_aa2d86-5e img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading25338_aa2d86-5e[data-kb-block=\"kb-adv-heading25338_aa2d86-5e\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<p class=\"kt-adv-heading25338_aa2d86-5e wp-block-kadence-advancedheading has-theme-palette-1-color has-text-color\" data-kb-block=\"kb-adv-heading25338_aa2d86-5e\">Kr\u00f3tka odpowied\u017a <\/p>\n\n\n<style>.wp-block-kadence-iconlist.kt-svg-icon-list-items25338_f6dda4-f8:not(.this-stops-third-party-issues){margin-top:0px;margin-bottom:0px;}.wp-block-kadence-iconlist.kt-svg-icon-list-items25338_f6dda4-f8 ul.kt-svg-icon-list:not(.this-prevents-issues):not(.this-stops-third-party-issues):not(.tijsloc){margin-top:0px;margin-right:0px;margin-bottom:var(--global-kb-spacing-sm, 1.5rem);margin-left:0px;}.wp-block-kadence-iconlist.kt-svg-icon-list-items25338_f6dda4-f8 ul.kt-svg-icon-list{grid-row-gap:5px;}.wp-block-kadence-iconlist.kt-svg-icon-list-items25338_f6dda4-f8 .kb-svg-icon-wrap{color:var(--global-palette2, #2B6CB0);}.wp-block-kadence-iconlist.kt-svg-icon-list-items25338_f6dda4-f8 ul.kt-svg-icon-list .kt-svg-icon-list-item-wrap .kt-svg-icon-list-single{margin-right:10px;}.kt-svg-icon-list-items25338_f6dda4-f8 ul.kt-svg-icon-list .kt-svg-icon-list-level-0 .kt-svg-icon-list-single svg{font-size:20px;}<\/style>\n<div class=\"wp-block-kadence-iconlist kt-svg-icon-list-items kt-svg-icon-list-items25338_f6dda4-f8 kt-svg-icon-list-columns-1 alignnone kt-list-icon-aligntop\"><ul class=\"kt-svg-icon-list\"><style>.kt-svg-icon-list-item-25338_1c1d5e-67 .kt-svg-icon-list-text mark.kt-highlight{background-color:unset;font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}<\/style>\n<li class=\"wp-block-kadence-listitem kt-svg-icon-list-item-wrap kt-svg-icon-list-item-25338_1c1d5e-67\"><span class=\"kb-svg-icon-wrap kb-svg-icon-fe_checkCircle kt-svg-icon-list-single\"><svg viewBox=\"0 0 24 24\"  fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"  aria-hidden=\"true\"><path d=\"M22 11.08V12a10 10 0 1 1-5.93-9.14\"\/><polyline points=\"22 4 12 14.01 9 11.01\"\/><\/svg><\/span><span class=\"kt-svg-icon-list-text\">Analiza ryzyka to cykliczny proces w ramach SZBI (Systemu Zarz\u0105dzania Bezpiecze\u0144stwem Informacji), nie jednorazowy dokument \u2014 wymaga go art. 8 ustawy o KSC.<\/span><\/li>\n\n\n<style>.kt-svg-icon-list-item-25338_213a23-df .kt-svg-icon-list-text mark.kt-highlight{background-color:unset;font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}<\/style>\n<li class=\"wp-block-kadence-listitem kt-svg-icon-list-item-wrap kt-svg-icon-list-item-25338_213a23-df\"><span class=\"kb-svg-icon-wrap kb-svg-icon-fe_checkCircle kt-svg-icon-list-single\"><svg viewBox=\"0 0 24 24\"  fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"  aria-hidden=\"true\"><path d=\"M22 11.08V12a10 10 0 1 1-5.93-9.14\"\/><polyline points=\"22 4 12 14.01 9 11.01\"\/><\/svg><\/span><span class=\"kt-svg-icon-list-text\">Wynik analizy steruje doborem \u015brodk\u00f3w technicznych, organizacyjnych, dokumentacyjnych i kontraktowych zgodnie z zasad\u0105 proporcjonalno\u015bci.<\/span><\/li>\n\n\n<style>.kt-svg-icon-list-item-25338_0b5b28-d2 .kt-svg-icon-list-text mark.kt-highlight{background-color:unset;font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}<\/style>\n<li class=\"wp-block-kadence-listitem kt-svg-icon-list-item-wrap kt-svg-icon-list-item-25338_0b5b28-d2\"><span class=\"kb-svg-icon-wrap kb-svg-icon-fe_checkCircle kt-svg-icon-list-single\"><svg viewBox=\"0 0 24 24\"  fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"  aria-hidden=\"true\"><path d=\"M22 11.08V12a10 10 0 1 1-5.93-9.14\"\/><polyline points=\"22 4 12 14.01 9 11.01\"\/><\/svg><\/span><span class=\"kt-svg-icon-list-text\">Najcz\u0119\u015bciej stosuje si\u0119 podej\u015bcie hybrydowe: ISO\/IEC 27005, NIST SP 800-30, EBIOS RM i FAIR.<\/span><\/li>\n\n\n<style>.kt-svg-icon-list-item-25338_1de1a9-45 .kt-svg-icon-list-text mark.kt-highlight{background-color:unset;font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}<\/style>\n<li class=\"wp-block-kadence-listitem kt-svg-icon-list-item-wrap kt-svg-icon-list-item-25338_1de1a9-45\"><span class=\"kb-svg-icon-wrap kb-svg-icon-fe_checkCircle kt-svg-icon-list-single\"><svg viewBox=\"0 0 24 24\"  fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"  aria-hidden=\"true\"><path d=\"M22 11.08V12a10 10 0 1 1-5.93-9.14\"\/><polyline points=\"22 4 12 14.01 9 11.01\"\/><\/svg><\/span><span class=\"kt-svg-icon-list-text\">Analiza musi obejmowa\u0107 tak\u017ce \u0142a\u0144cuch dostaw ICT oraz ci\u0105g\u0142y monitoring systemu informacyjnego.<\/span><\/li>\n\n\n<style>.kt-svg-icon-list-item-25338_8e9a36-d6 .kt-svg-icon-list-text mark.kt-highlight{background-color:unset;font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}<\/style>\n<li class=\"wp-block-kadence-listitem kt-svg-icon-list-item-wrap kt-svg-icon-list-item-25338_8e9a36-d6\"><span class=\"kb-svg-icon-wrap kb-svg-icon-fe_checkCircle kt-svg-icon-list-single\"><svg viewBox=\"0 0 24 24\"  fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"  aria-hidden=\"true\"><path d=\"M22 11.08V12a10 10 0 1 1-5.93-9.14\"\/><polyline points=\"22 4 12 14.01 9 11.01\"\/><\/svg><\/span><span class=\"kt-svg-icon-list-text\">SOC nie jest obowi\u0105zkowy jako nazwana us\u0142uga &#8211; liczy si\u0119 adekwatny, ci\u0105g\u0142y monitoring i zdolno\u015b\u0107 obs\u0142ugi incydent\u00f3w.<\/span><\/li>\n\n\n<style>.kt-svg-icon-list-item-25338_815600-03 .kt-svg-icon-list-text mark.kt-highlight{background-color:unset;font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}<\/style>\n<li class=\"wp-block-kadence-listitem kt-svg-icon-list-item-wrap kt-svg-icon-list-item-25338_815600-03\"><span class=\"kb-svg-icon-wrap kb-svg-icon-fe_checkCircle kt-svg-icon-list-single\"><svg viewBox=\"0 0 24 24\"  fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"  aria-hidden=\"true\"><path d=\"M22 11.08V12a10 10 0 1 1-5.93-9.14\"\/><polyline points=\"22 4 12 14.01 9 11.01\"\/><\/svg><\/span><span class=\"kt-svg-icon-list-text\">Za analiz\u0119 ryzyka odpowiada kierownik podmiotu kluczowego lub wa\u017cnego &#8211; delegowanie zada\u0144 nie znosi tej odpowiedzialno\u015bci.<\/span><\/li>\n<\/ul><\/div>\n<\/div><\/div>\n\n\n<p>Analiza ryzyka w cyberbezpiecze\u0144stwie to proces identyfikacji zagro\u017ce\u0144, oceny podatno\u015bci i oszacowania wp\u0142ywu incydentu na \u015bwiadczenie us\u0142ugi. W ustawie o krajowym systemie cyberbezpiecze\u0144stwa i w dyrektywie NIS2 analiza ryzyka nie jest osobnym dokumentem przygotowywanym \u201ena audyt\u201d. Jest mechanizmem, kt\u00f3ry steruje doborem \u015brodk\u00f3w technicznych, organizacyjnych, dokumentacyjnych i kontraktowych w ramach <a href=\"https:\/\/inteca.com\/pl\/insighty-biznesowe\/system-zarzadzania-bezpieczenstwem-informacji\/\">systemu zarz\u0105dzania bezpiecze\u0144stwem informacji (SZBI)<\/a>. Innymi s\u0142owy: to wynik analizy ryzyka decyduje, czy dany system potrzebuje MFA, segmentacji sieci, dodatkowej klauzuli w umowie z dostawc\u0105 czy osobnej polityki tematycznej \u2014 a nie odwrotnie.<\/p>\n\n<p>Ten artyku\u0142 pokazuje, jak zaprojektowa\u0107 i prowadzi\u0107 analiz\u0119 ryzyka zgodn\u0105 z KSC\/NIS2: jakie metody stosowa\u0107 (ISO\/IEC 27005, NIST SP 800-30, EBIOS RM, FAIR), jak dzia\u0142a zasada proporcjonalno\u015bci, jakie obszary musz\u0105 by\u0107 obj\u0119te analiz\u0105 \u2014 w tym \u0142a\u0144cuch dostaw oraz monitoring i obs\u0142uga zdarze\u0144 \u2014 i jakich dowod\u00f3w oczekuje audytor. Pokazuje te\u017c, gdzie w tym procesie mie\u015bci si\u0119 warstwa techniczna dostarczana przez Inteca, a gdzie zaczyna si\u0119 praca kancelarii prawnej.<\/p>\n\n<h2>Czym jest analiza ryzyka w cyberbezpiecze\u0144stwie i dlaczego ma znaczenie dla KSC\/NIS2?<\/h2>\n\n<p>Analiza ryzyka to proces oceny potencjalnych zagro\u017ce\u0144 dla cel\u00f3w organizacji, obejmuj\u0105cy prawdopodobie\u0144stwo wyst\u0105pienia zdarzenia i skal\u0119 jego skutk\u00f3w. Analiza ryzyka IT jest jej wyspecjalizowan\u0105 cz\u0119\u015bci\u0105, skoncentrowan\u0105 na systemach informacyjnych, danych, us\u0142ugach cyfrowych i zale\u017cno\u015bciach technologicznych, w tym w kontek\u015bcie ochrony danych osobowych. W praktyce oba podej\u015bcia \u2014 ryzyko operacyjne i ryzyko cyberbezpiecze\u0144stwa \u2014 powinny dzia\u0142a\u0107 razem, bo dotycz\u0105 tych samych proces\u00f3w krytycznych dla \u015bwiadczenia us\u0142ugi.<\/p>\n\n<p>FAQ Ministerstwa Cyfryzacji definiuje ten obowi\u0105zek wprost: podstawowym obowi\u0105zkiem podmiot\u00f3w kluczowych i podmiot\u00f3w wa\u017cnych jest wdro\u017cenie SZBI obejmuj\u0105cego \u201eprowadzenie systematycznego szacowania ryzyka wyst\u0105pienia incydentu oraz zarz\u0105dzanie tym ryzykiem \u2014 nale\u017cy regularnie szacowa\u0107 ryzyko (identyfikowa\u0107, analizowa\u0107, ocenia\u0107), a nast\u0119pnie podejmowa\u0107 decyzj\u0119 o podej\u015bciu do tego ryzyka\u201d. To zdanie zmienia perspektyw\u0119: ryzyko nie jest oceniane raz, tylko utrzymywane jako sta\u0142y, cykliczny proces zarz\u0105dczy.<\/p>\n\n<h3>Jak zdefiniowa\u0107 cel i zakres analizy ryzyka IT na pocz\u0105tku projektu?<\/h3>\n\n<p>Cel analizy ryzyka IT trzeba powi\u0105za\u0107 z ci\u0105g\u0142o\u015bci\u0105 \u015bwiadczenia us\u0142ug, ochron\u0105 danych oraz zgodno\u015bci\u0105 z KSC\/NIS2. Zakres powinien obejmowa\u0107 aktywa, procesy, interfejsy z dostawcami, role odpowiedzialne i kryteria akceptacji ryzyka. Ju\u017c na starcie warto ustali\u0107, jakie ryzyka s\u0105 nieakceptowalne i jakie \u015brodki maj\u0105 priorytet \u2014 taki kontekst pozwala przej\u015b\u0107 do w\u0142a\u015bciwej identyfikacji zagro\u017ce\u0144 i oceny podatno\u015bci, zamiast zaczyna\u0107 od listy narz\u0119dzi do kupienia.<\/p>\n\n<h2>Jak analiza ryzyka wynika z wymaga\u0144 KSC i NIS2 oraz na czym polega zasada proporcjonalno\u015bci?<\/h2>\n\n<p>Obowi\u0105zek szacowania ryzyka wynika wprost z art. 8 ustawy o KSC i obejmuje dwa powi\u0105zane elementy. Pierwszy to systematyczne szacowanie ryzyka wyst\u0105pienia incydentu i zarz\u0105dzanie tym ryzykiem. Drugi to wdro\u017cenie \u015brodk\u00f3w odpowiednich i proporcjonalnych do oszacowanego ryzyka, uwzgl\u0119dniaj\u0105cych najnowszy stan wiedzy, koszty wdro\u017cenia, wielko\u015b\u0107 podmiotu, prawdopodobie\u0144stwo wyst\u0105pienia incydent\u00f3w, nara\u017cenie podmiotu na ryzyko oraz skutki spo\u0142eczne i gospodarcze. To w\u0142a\u015bnie ten drugi element sprawia, \u017ce wynik analizy ryzyka przek\u0142ada si\u0119 bezpo\u015brednio na konkretne decyzje \u2014 techniczne, organizacyjne, dokumentacyjne i kontraktowe.<\/p>\n\n<p>Ministerstwo Cyfryzacji t\u0142umaczy zasad\u0119 proporcjonalno\u015bci na konkretnym przyk\u0142adzie: rozbudowany dzia\u0142 cyberbezpiecze\u0144stwa, z politykami bezpiecze\u0144stwa i odpowiednim SIEM, nie b\u0119dzie efektywny, je\u017celi jednocze\u015bnie zaniedbane b\u0119dzie szkolenie personelu z cyberhigieny. Celem przepisu jest ograniczenie nadmiernych, nierealnych obowi\u0105zk\u00f3w i dopasowanie \u015brodk\u00f3w do faktycznej charakterystyki organizacji \u2014 jej wielko\u015bci, \u015bwiadczonych us\u0142ug, mo\u017cliwo\u015bci finansowych i realnych zagro\u017ce\u0144, a nie do wzorca \u201emaksymalnego\u201d zabezpieczenia.<\/p>\n\n<p>W praktyce oznacza to, \u017ce jedna analiza ryzyka steruje czterema rodzajami decyzji: technicznymi (np. MFA dla kont uprzywilejowanych, segmentacja sieci, szyfrowanie), organizacyjnymi (role, procedury, szkolenia), dokumentacyjnymi (polityki tematyczne, dokumentacja normatywna i operacyjna SZBI) oraz kontraktowymi (wymagania cyberbezpiecze\u0144stwa w umowach z dostawcami ICT). Traktowanie tych czterech warstw osobno \u2014 bez wsp\u00f3lnego rejestru ryzyk \u2014 jest jednym z cz\u0119stszych b\u0142\u0119d\u00f3w wdro\u017ceniowych.<\/p>\n\n<h3>Kto odpowiada za analiz\u0119 ryzyka i decyzje o akceptacji ryzyka?<\/h3>\n\n<p>Za analiz\u0119 ryzyka i realizacj\u0119 obowi\u0105zk\u00f3w cyberbezpiecze\u0144stwa odpowiada kierownik <a href=\"https:\/\/inteca.com\/pl\/insighty-biznesowe\/kogo-dotyczy-ksc\/\">podmiotu kluczowego lub wa\u017cnego<\/a>, a przy organie wieloosobowym odpowiedzialno\u015b\u0107 spoczywa na wszystkich jego cz\u0142onkach, je\u015bli nie wskazano osoby odpowiedzialnej. Delegowanie zada\u0144 do zespo\u0142u IT lub dostawcy zewn\u0119trznego nie znosi tej odpowiedzialno\u015bci. W praktyce oznacza to konieczno\u015b\u0107 formalnych decyzji o akceptacji ryzyka rezydualnego, finansowaniu \u015brodk\u00f3w i nadzorze nad ich wdro\u017ceniem \u2014 a to wymaga poprawnie zaprojektowanego procesu analizy.<\/p>\n\n<h2>Jak wygl\u0105da proces analizy ryzyka krok po kroku w uj\u0119ciu KSC\/NIS2?<\/h2>\n\n<p>Proces analizy ryzyka obejmuje inwentaryzacj\u0119 aktyw\u00f3w, identyfikacj\u0119 zagro\u017ce\u0144, ocen\u0119 podatno\u015bci, oszacowanie prawdopodobie\u0144stwa i wp\u0142ywu oraz wyb\u00f3r strategii post\u0119powania z ryzykiem. W praktyce ko\u0144czy si\u0119 on decyzj\u0105: mitygacja, unikanie, transfer albo akceptacja ryzyka rezydualnego. Proces musi by\u0107 cykliczny i aktualizowany po zmianach architektury, incydentach i zmianach biznesowych.<\/p>\n\n<p>FAQ ministerstwa rozbija to na konkretne dzia\u0142ania operacyjne, kt\u00f3re w praktyce wype\u0142niaj\u0105 wynik analizy ryzyka tre\u015bci\u0105. Poni\u017csza lista \u0142\u0105czy og\u00f3lny model post\u0119powania z ryzykiem z tymi szczeg\u00f3\u0142owymi dzia\u0142aniami wskazanymi przez ministerstwo jako element dostosowania do ustawy.<\/p>\n\n<ol class=\"risk-steps\"><li class=\"risk-steps__item\">Zidentyfikuj aktywa, procesy i zale\u017cno\u015bci us\u0142ugowe \u2014 w tym systemy, bez kt\u00f3rych us\u0142uga nie mo\u017ce by\u0107 \u015bwiadczona.<\/li><li class=\"risk-steps__item\">Przypisz zagro\u017cenia i podatno\u015bci do ka\u017cdego aktywa oraz procesu.<\/li><li class=\"risk-steps__item\">Oszacuj ryzyko na podstawie wp\u0142ywu i prawdopodobie\u0144stwa wyst\u0105pienia incydentu.<\/li><li class=\"risk-steps__item\">Przejrzyj dotychczasowe polityki, procedury i uprawnienia personelu, cofaj\u0105c dost\u0119p osobom, kt\u00f3re go ju\u017c nie potrzebuj\u0105.<\/li><li class=\"risk-steps__item\">Przejrzyj umowy z dostawcami sprz\u0119tu i oprogramowania pod k\u0105tem wymaga\u0144 cyberbezpiecze\u0144stwa.<\/li><li class=\"risk-steps__item\">Wybierz \u015brodki zaradcze proporcjonalne do ryzyka i zapisz je w planie zarz\u0105dzania ryzykiem z w\u0142a\u015bcicielami i terminami.<\/li><li class=\"risk-steps__item\">Wdro\u017c sta\u0142y, w miar\u0119 mo\u017cliwo\u015bci zautomatyzowany monitoring systemu informacyjnego pod k\u0105tem zdarze\u0144 mog\u0105cych by\u0107 incydentami.<\/li><li class=\"risk-steps__item\">Przetestuj plany ci\u0105g\u0142o\u015bci dzia\u0142ania (BCP), plany awaryjne (ISCP) i plany odtworzenia (DRP).<\/li><li class=\"risk-steps__item\">Udokumentuj proces w dokumentacji normatywnej i operacyjnej SZBI.<\/li><li class=\"risk-steps__item\">Monitoruj skuteczno\u015b\u0107 wdro\u017conych \u015brodk\u00f3w i regularnie aktualizuj poziom ryzyka.<\/li><\/ol>\n\n<h2>Jakie metody analizy ryzyka najlepiej wspieraj\u0105 zgodno\u015b\u0107 z KSC\/NIS2?<\/h2>\n\n<p>Najcz\u0119\u015bciej stosuje si\u0119 podej\u015bcie hybrydowe: ISO\/IEC 27005 jako rama zarz\u0105dcza osadzona w systemie zarz\u0105dzania bezpiecze\u0144stwem informacji, EBIOS RM do scenariuszy ataku i priorytetyzacji \u015bcie\u017cek krytycznych, NIST SP 800-30 do pog\u0142\u0119bionej oceny technicznej podatno\u015bci i zagro\u017ce\u0144 oraz FAIR do kwantyfikacji finansowej ryzyka. Taki model \u0142\u0105czy j\u0119zyk compliance z j\u0119zykiem decyzji biznesowych i bud\u017cetowych, u\u0142atwiaj\u0105c uzasadnienie inwestycji ochronnych przed zarz\u0105dem.<\/p>\n\n<p>Wyb\u00f3r metody nie jest dowolny \u2014 powinien nawi\u0105zywa\u0107 do norm, na kt\u00f3rych opiera si\u0119 sam re\u017cim regulacyjny. Rozporz\u0105dzenie wykonawcze Komisji (UE) 2024\/2690, wydane na podstawie art. 21 ust. 5 <a href=\"https:\/\/inteca.com\/pl\/insighty-biznesowe\/dyrektywa-nis2\/\">dyrektywy NIS2<\/a>, zosta\u0142o oparte na dokumentach normalizacyjnych ISO\/IEC 27001 i ISO\/IEC 27002. Oznacza to, \u017ce organizacja, kt\u00f3ra buduje proces szacowania ryzyka zgodnie z ISO\/IEC 27005 i ISO\/IEC 27001 (system zarz\u0105dzania bezpiecze\u0144stwem informacji) oraz uzupe\u0142nia go katalogiem zabezpiecze\u0144 z ISO\/IEC 27002, prowadzi analiz\u0119 ryzyka w logice, jak\u0105 rozporz\u0105dzenie unijne przyj\u0119\u0142o jako punkt odniesienia dla wielu obowi\u0105zk\u00f3w technicznych i organizacyjnych z NIS2.<\/p>\n\n<!-- \u2550\u2550\u2550 BANER CROSS-LINK \u2550\u2550\u2550 -->\n<!-- Wklej w tre\u015b\u0107 artyku\u0142u. Zmie\u0144 href, tytu\u0142 artyku\u0142u i opcjonalnie tag. -->\n\n<style>\n  .inteca-crosslink {\n    display: flex;\n    align-items: center;\n    gap: 20px;\n    padding: 20px 24px;\n    background: var(--bg-light, #f8f9fb);\n    border: 1px solid var(--border-light, rgba(127,140,141,0.12));\n    border-left: 3px solid var(--primary-blue, #3e7c93);\n    border-radius: 0 12px 12px 0;\n    text-decoration: none;\n    color: inherit;\n    transition: all 0.25s ease;\n    margin: 20px 0;\n    font-family: 'Poppins', -apple-system, BlinkMacSystemFont, sans-serif;\n  }\n\n  .inteca-crosslink:hover {\n    border-left-color: var(--accent-orange, #d35400);\n    box-shadow: 0 4px 16px rgba(0,0,0,0.05);\n    transform: translateX(4px);\n  }\n\n  .inteca-crosslink-icon {\n    flex-shrink: 0;\n    width: 40px;\n    height: 40px;\n    border-radius: 8px;\n    background: var(--primary-dark, #19242f);\n    display: flex;\n    align-items: center;\n    justify-content: center;\n    font-size: 16px;\n  }\n\n  .inteca-crosslink-body {\n    flex: 1;\n    min-width: 0;\n  }\n\n  .inteca-crosslink-label {\n    font-size: 11px;\n    text-transform: uppercase;\n    letter-spacing: 1px;\n    font-weight: 600;\n    color: var(--primary-blue, #3e7c93);\n    margin-bottom: 2px;\n  }\n\n  .inteca-crosslink-title {\n    font-size: 15px;\n    font-weight: 500;\n    color: var(--text-dark, #1a1a2e);\n    line-height: 1.4;\n  }\n\n  .inteca-crosslink:hover .inteca-crosslink-title {\n    color: var(--accent-orange, #d35400);\n  }\n\n  .inteca-crosslink-arrow {\n    flex-shrink: 0;\n    font-size: 18px;\n    color: var(--text-muted, #6b7280);\n    transition: all 0.25s ease;\n  }\n\n  .inteca-crosslink:hover .inteca-crosslink-arrow {\n    color: var(--accent-orange, #d35400);\n    transform: translateX(4px);\n  }\n<\/style>\n\n<!-- U\u017bYCIE: skopiuj <a> i zmie\u0144 href + tytu\u0142 -->\n\n<a href=\"https:\/\/inteca.com\/pl\/insighty-biznesowe\/dyrektywa-nis2\/\" class=\"inteca-crosslink\">\n  <div class=\"inteca-crosslink-icon\">\ud83d\udccb<\/div>\n  <div class=\"inteca-crosslink-body\">\n    <div class=\"inteca-crosslink-label\">Przeczytaj r\u00f3wnie\u017c<\/div>\n    <div class=\"inteca-crosslink-title\">Dyrektywa NIS2: co to jest, kogo dotyczy i jak wdro\u017cy\u0107 wymagania cyberbezpiecze\u0144stwa<\/div>\n  <\/div>\n  <div class=\"inteca-crosslink-arrow\">\u2192<\/div>\n<\/a>\n\n<h3>Jak por\u00f3wna\u0107 metody analizy ryzyka pod k\u0105tem decyzji biznesowych i wdro\u017cenia?<\/h3>\n\n<p>Metody analizy ryzyka r\u00f3\u017cni\u0105 si\u0119 g\u0142\u00f3wnie poziomem szczeg\u00f3\u0142owo\u015bci, typem danych wej\u015bciowych i sposobem prezentacji wyniku. Dob\u00f3r metody powinien odpowiada\u0107 dojrza\u0142o\u015bci organizacji, krytyczno\u015bci us\u0142ug i wymaganiom nadzorczym. Poni\u017csza tabela pokazuje praktyczne r\u00f3\u017cnice.<\/p>\n\n<div class=\"risk-tab\"><div class=\"risk-tab__scroll\"><table class=\"risk-tab__table\"><thead><tr><th class=\"risk-tab__corner\" scope=\"col\">Metodyka<\/th><th class=\"risk-tab__col\" scope=\"col\">Typ analizy<\/th><th class=\"risk-tab__col\" scope=\"col\">Najmocniejsza warto\u015b\u0107<\/th><th class=\"risk-tab__col\" scope=\"col\">Ograniczenie<\/th><th class=\"risk-tab__col risk-tab__col--key\" scope=\"col\">Rola w zgodno\u015bci KSC\/NIS2<\/th><\/tr><\/thead><tbody><tr><th scope=\"row\">ISO\/IEC 27005<\/th><td>Jako\u015bciowa \/ zarz\u0105dcza<\/td><td>Sp\u00f3jna rama SZBI i audytowalno\u015b\u0107<\/td><td>Wymaga doprecyzowania narz\u0119dzi operacyjnych<\/td><td class=\"risk-tab__key\">Rama zgodna z podstaw\u0105 normatywn\u0105 rozporz\u0105dzenia 2024\/2690<\/td><\/tr><tr><th scope=\"row\">NIST SP 800-30<\/th><td>Techniczna, p\u00f3\u0142ilo\u015bciowa<\/td><td>G\u0142\u0119boka analiza podatno\u015bci i zagro\u017ce\u0144<\/td><td>Du\u017ca z\u0142o\u017cono\u015b\u0107 dokumentacyjna<\/td><td class=\"risk-tab__key\">Dobre wsparcie dla audytu technicznego i skan\u00f3w podatno\u015bci<\/td><\/tr><tr><th scope=\"row\">EBIOS RM<\/th><td>Scenariuszowa, jako\u015bciowa<\/td><td>Priorytetyzacja krytycznych \u015bcie\u017cek ataku<\/td><td>Zale\u017cno\u015b\u0107 od jako\u015bci warsztat\u00f3w eksperckich<\/td><td class=\"risk-tab__key\">Dobre wsparcie dla oceny ryzyka \u0142a\u0144cucha dostaw<\/td><\/tr><tr><th scope=\"row\">FAIR<\/th><td>Ilo\u015bciowa, finansowa<\/td><td>Przeliczenie ryzyka na koszt \/ strat\u0119<\/td><td>Wymaga dobrych danych wej\u015bciowych<\/td><td class=\"risk-tab__key\">Uzasadnienie bud\u017cetu \u015brodk\u00f3w wobec zarz\u0105du<\/td><\/tr><\/tbody><\/table><\/div><p class=\"risk-tab__hint\">Przesu\u0144 tabel\u0119 w bok, aby zobaczy\u0107 wszystkie kolumny<\/p><\/div>\n\n<style>.risk-tab,.risk-steps{font-family:'Poppins',-apple-system,BlinkMacSystemFont,sans-serif}.risk-tab{margin:28px 0 32px}.risk-tab__scroll{overflow-x:auto;border:1px solid rgba(127,140,141,.18);border-radius:14px;box-shadow:0 4px 24px rgba(25,36,47,.06);background:#fff;-webkit-overflow-scrolling:touch}.risk-tab__table{width:100%;border-collapse:separate;border-spacing:0;font-size:14.5px;line-height:1.55;color:#555;font-weight:300;margin:0;min-width:980px}.risk-tab__table thead th{position:sticky;top:0;z-index:3;padding:16px 18px;text-align:left;vertical-align:middle;font-size:13.5px;font-weight:500;color:#fff;letter-spacing:.1px;background:#19242f;border-bottom:1px solid rgba(255,255,255,.1)}.risk-tab__corner{left:0;z-index:4;background:#101a23;border-right:1px solid rgba(255,255,255,.12);min-width:200px;width:19%}.risk-tab__col--key{background:linear-gradient(135deg,#19242f 0%,#3e7c93 140%);box-shadow:inset 3px 0 0 #d35400}.risk-tab__table tbody th{position:sticky;left:0;z-index:2;padding:15px 18px;text-align:left;vertical-align:top;font-size:14px;font-weight:500;color:#1a1a2e;background:#f8f9fb;border-right:1px solid rgba(127,140,141,.18);border-bottom:1px solid rgba(127,140,141,.14)}.risk-tab__table tbody td{padding:15px 18px;vertical-align:top;border-bottom:1px solid rgba(127,140,141,.14)}.risk-tab__table tbody td.risk-tab__key{background:rgba(62,124,147,.045);box-shadow:inset 3px 0 0 rgba(211,84,0,.28);color:#1a1a2e}.risk-tab__table tbody tr:last-child th,.risk-tab__table tbody tr:last-child td{border-bottom:0}.risk-tab__table tbody tr:hover th{background:#eef1f5}.risk-tab__table tbody tr:hover td{background:rgba(62,124,147,.06)}.risk-tab__table tbody tr:hover td.risk-tab__key{background:rgba(62,124,147,.1)}.risk-tab__hint{display:none;margin:10px 0 0;font-size:12px;font-weight:300;color:#6b7280;text-align:center}.risk-steps{counter-reset:risk-step;list-style:none;margin:28px 0 32px;padding:0 0 0 4px;position:relative}.risk-steps::before{content:\"\";position:absolute;left:19px;top:14px;bottom:14px;width:2px;background:linear-gradient(to bottom,#d35400 0%,#3e7c93 55%,#10b981 100%);opacity:.35}.risk-steps__item{counter-increment:risk-step;position:relative;z-index:1;margin:0 0 10px;padding:15px 20px 15px 60px;background:#fff;border:1px solid rgba(127,140,141,.18);border-radius:12px;box-shadow:0 2px 12px rgba(25,36,47,.04);font-size:15px;font-weight:300;line-height:1.6;color:#555;list-style:none;transition:transform .25s ease,box-shadow .25s ease,border-color .25s ease}.risk-steps__item::marker{content:\"\"}.risk-steps__item::before{content:counter(risk-step);position:absolute;left:-4px;top:14px;width:32px;height:32px;display:flex;align-items:center;justify-content:center;background:#19242f;color:#fff;font-size:13px;font-weight:500;border-radius:50%;box-shadow:0 0 0 4px #fff;transition:background .25s ease}.risk-steps__item:hover{transform:translateY(-2px);border-color:rgba(62,124,147,.35);box-shadow:0 6px 20px rgba(25,36,47,.08)}.risk-steps__item:hover::before{background:#d35400}.risk-steps__item:last-child{margin-bottom:0}@media (max-width:1024px){.risk-tab__hint{display:block}}@media (max-width:600px){.risk-tab__table{font-size:13.5px;min-width:860px}.risk-tab__table thead th{padding:13px 14px;font-size:12.5px}.risk-tab__table tbody th{padding:13px 14px;font-size:13px;min-width:150px}.risk-tab__corner{min-width:150px}.risk-tab__table tbody td{padding:13px 14px}.risk-steps{padding-left:2px}.risk-steps::before{left:17px}.risk-steps__item{padding:14px 16px 14px 52px;font-size:14px}.risk-steps__item::before{left:-2px;top:12px;width:28px;height:28px;font-size:12.5px}}<\/style>\n\n<p>W praktyce Inteca zaczyna projekt KSC\/NIS2 od <a href=\"https:\/\/inteca.com\/pl\/insighty-biznesowe\/audyt-ksc-nis2\/\">audytu technicznego (Etap 1, self-assessment)<\/a>, poniewa\u017c dopiero on wskazuje realny zakres wdro\u017cenia technicznego \u2014 zamiast zgadywa\u0107, kt\u00f3re \u015brodki s\u0105 potrzebne, organizacja opiera decyzj\u0119 na inwentaryzacji aktyw\u00f3w, to\u017csamo\u015bci i uprawnie\u0144 oraz na wst\u0119pnym skanie podatno\u015bci. To nie jest podwykonawstwo kwalifikacji prawnej \u2014 kwalifikacj\u0119 podmiotu jako kluczowego lub wa\u017cnego prowadzi kancelaria, a Inteca dostarcza wsad techniczny do wsp\u00f3lnej oceny ryzyka.<\/p>\n\n<h2>Jakie obszary musi obj\u0105\u0107 analiza ryzyka zgodna z KSC\/NIS2?<\/h2>\n\n<p>Analiza ryzyka musi obj\u0105\u0107 nie tylko technologi\u0119, ale te\u017c procesy, ludzi i zale\u017cno\u015bci z dostawcami zewn\u0119trznymi. W praktyce obowi\u0105zkowe s\u0105 m.in. polityki ryzyka, bezpiecze\u0144stwo rozwoju i utrzymania system\u00f3w, bezpiecze\u0144stwo fizyczne, \u0142a\u0144cuch dostaw, ci\u0105g\u0142o\u015b\u0107 dzia\u0142ania, monitorowanie w trybie ci\u0105g\u0142ym, kontrola dost\u0119pu, kryptografia i podstawowe zasady cyberhigieny. Szczeg\u00f3lne znaczenie maj\u0105 aktywa krytyczne dla \u015bwiadczenia us\u0142ugi oraz ich powi\u0105zania z dostawcami ICT \u2014 co prowadzi do osobnego w\u0105tku: ryzyka \u0142a\u0144cucha dostaw.<\/p>\n\n<h2>Jak zarz\u0105dza\u0107 ryzykiem \u0142a\u0144cucha dostaw ICT w ramach analizy ryzyka?<\/h2>\n\n<p>Bezpiecze\u0144stwo i ci\u0105g\u0142o\u015b\u0107 \u0142a\u0144cucha dostaw produkt\u00f3w ICT, us\u0142ug ICT i proces\u00f3w ICT, od kt\u00f3rych zale\u017cy \u015bwiadczenie us\u0142ugi, jest odr\u0119bnym, obowi\u0105zkowym elementem SZBI \u2014 nie dodatkiem do analizy ryzyka technicznego, tylko jej integraln\u0105 cz\u0119\u015bci\u0105. Ustawa wymaga uwzgl\u0119dnienia relacji mi\u0119dzy bezpo\u015brednim dostawc\u0105 sprz\u0119tu lub oprogramowania a podmiotem kluczowym lub wa\u017cnym, w tym podatno\u015bci zwi\u0105zanych z dostawc\u0105 oraz jako\u015bci dostarczanych produkt\u00f3w i us\u0142ug.<\/p>\n\n<p>FAQ ministerstwa precyzuje, czego to praktycznie wymaga: podmioty kluczowe i wa\u017cne powinny zna\u0107 sw\u00f3j \u0142a\u0144cuch dostaw, w tym swoich dostawc\u00f3w oraz ryzyka zwi\u0105zane z nimi; dba\u0107 o odpowiednie wymagania z zakresu cyberbezpiecze\u0144stwa w umowach, a w przypadku um\u00f3w adhezyjnych z globalnymi dostawcami wybiera\u0107 tych, kt\u00f3rzy posiadaj\u0105 certyfikacj\u0119 z zakresu cyberbezpiecze\u0144stwa w\u0142asnych produkt\u00f3w i us\u0142ug; inwentaryzowa\u0107 swoje zasoby oraz monitorowa\u0107 podatno\u015bci zwi\u0105zane z wykorzystywanym sprz\u0119tem i oprogramowaniem, mityguj\u0105c je np. przez aktualizacje.<\/p>\n\n<p>W warstwie technicznej oznacza to aktualny wykaz bezpo\u015brednich dostawc\u00f3w z przypisanymi produktami, us\u0142ugami i procesami ICT oraz bie\u017c\u0105ce monitorowanie podatno\u015bci po ich stronie. W warstwie kontraktowej oznacza to klauzule dotycz\u0105ce zg\u0142aszania incydent\u00f3w, informowania o podatno\u015bciach i wymaga\u0144 wobec personelu dostawcy. Inteca dostarcza techniczne kryteria oceny dostawc\u00f3w i wymagania konfiguracyjne w ramach Etapu 2 (wdro\u017cenie techniczne); tre\u015b\u0107 klauzul umownych i ankiet bezpiecze\u0144stwa wobec dostawc\u00f3w pozostaje domen\u0105 kancelarii.<\/p>\n\n<h2>Czy trzeba mie\u0107 SOC? Jak zaprojektowa\u0107 monitoring adekwatny do ryzyka?<\/h2>\n\n<p>Ustawa wymaga obj\u0119cia systemu informacyjnego wykorzystywanego do \u015bwiadczenia us\u0142ugi systemem monitorowania w trybie ci\u0105g\u0142ym \u2014 nie po to, by narzuci\u0107 konkretne narz\u0119dzie, tylko po to, by zapewni\u0107 rozliczalno\u015b\u0107 dzia\u0142a\u0144 i mo\u017cliwo\u015b\u0107 odtworzenia zdarze\u0144 w systemie. FAQ ministerstwa wprost odpowiada na pytanie o obowi\u0105zek posiadania Security Operations Center:<\/p>\n\n<p>\u201eNie ma narzuconych rozwi\u0105za\u0144 technicznych czy organizacyjnych. To podmiot kluczowy lub podmiot wa\u017cny musi podj\u0105\u0107 decyzj\u0119 o tym, jakie rozwi\u0105zanie b\u0119dzie adekwatne do jego sytuacji. Pami\u0119tajmy, \u017ce ustawa obejmuje wiele bardzo zr\u00f3\u017cnicowanych podmiot\u00f3w. Podmioty mog\u0105 zdecydowa\u0107 si\u0119 na zewn\u0119trzne, komercyjne us\u0142ugi, lub postawi\u0107 na budowanie w\u0142asnych kompetencji, cz\u0119sto w ramach grupy kapita\u0142owej.\u201d<\/p>\n\n<p>Innymi s\u0142owy: SOC jako nazwana us\u0142uga nie jest wymogiem ustawowym. Wymogiem jest adekwatny, ci\u0105g\u0142y monitoring i zdolno\u015b\u0107 do obs\u0142ugi zdarze\u0144 \u2014 a to, czy zapewni to w\u0142asny zesp\u00f3\u0142, komercyjny SOC zewn\u0119trzny, czy dobrze skonfigurowane narz\u0119dzie klasy SIEM z jasno okre\u015blonymi regu\u0142ami, wynika z analizy ryzyka, wielko\u015bci podmiotu i krytyczno\u015bci \u015bwiadczonych us\u0142ug. Ministerstwo podkre\u015bla przy tym, \u017ce do zapewnienia rozliczalno\u015bci niekoniecznie trzeba zatrudnia\u0107 dodatkow\u0105 osob\u0119 \u2014 wystarczy skorzysta\u0107 z narz\u0119dzi, w tym open-source, typu SIEM i ustawi\u0107 w nich adekwatne regu\u0142y, monitoruj\u0105c w szczeg\u00f3lno\u015bci ruch z i do podmiotu, dost\u0119p do systemu, konta uprzywilejowane, krytyczne pliki konfiguracyjne i kopie zapasowe oraz logi z narz\u0119dzi bezpiecze\u0144stwa.<\/p>\n\n<p>To dok\u0142adnie ten obszar odpowiada za modu\u0142 \u201emonitoring bezpiecze\u0144stwa\u201d w ofercie Inteca: wdro\u017cenie lub konfiguracja SIEM, detekcja anomalii i playbooki reagowania na incydenty w Etapie 2, z opcj\u0105 przej\u015bcia na tryb ci\u0105g\u0142y \u2014 monitoring 24\/7 i wsparcie incydentowe zgodne z terminami 24h\/72h \u2014 w opcjonalnym Etapie 3 (utrzymanie). Decyzj\u0119, czy organizacja potrzebuje w\u0142asnego SOC, zewn\u0119trznego SOC czy monitoringu opartego na SIEM bez dedykowanego centrum, powinna poprzedza\u0107 w\u0142a\u015bnie analiza ryzyka, a nie odwrotnie.<\/p>\n\n<h2>Jak analiza ryzyka \u0142\u0105czy si\u0119 z obowi\u0105zkami raportowania 24\/72\/30?<\/h2>\n\n<p>Analiza ryzyka wyznacza priorytety reagowania, dlatego bezpo\u015brednio wp\u0142ywa na zdolno\u015b\u0107 do wykonania obowi\u0105zk\u00f3w 24\/72\/30. Dla incydentu powa\u017cnego wymagane jest wczesne ostrze\u017cenie do 24 godzin od wykrycia, zg\u0142oszenie incydentu do 72 godzin od wykrycia oraz sprawozdanie ko\u0144cowe w ci\u0105gu 30 dni od zg\u0142oszenia. Je\u017celi proces ryzyka i klasyfikacji incydent\u00f3w dzia\u0142a s\u0142abo, organizacja traci czas operacyjny na etapie klasyfikacji i nara\u017ca si\u0119 na ryzyko sankcyjne wynikaj\u0105ce z przekroczenia termin\u00f3w. Dlatego potrzebne s\u0105 mierzalne dowody wykonania procesu, a nie wy\u0142\u0105cznie opisy procedur w dokumentacji.<\/p>\n\n<h2>Jakie dowody potwierdzaj\u0105, \u017ce analiza ryzyka jest realnie wykonywana?<\/h2>\n\n<p>Z perspektywy audytu liczy si\u0119 data, odpowiedzialna osoba i wykazany skutek dzia\u0142ania \u2014 nie sama deklaracja polityki. Ministerstwo Cyfryzacji podkre\u015bla to jednoznacznie w kontek\u015bcie dokumentacji zakupionej \u201epod NIS2\u201d: kupiona i podpisana przez zarz\u0105d dokumentacja schowana w \u201eszafie NIS2\u201d nie zapewni realnego cyberbezpiecze\u0144stwa w organizacji. Najlepszym dowodem s\u0105 artefakty operacyjne, nie deklaracje.<\/p>\n\n<ul class=\"risk-evid\"><li class=\"risk-evid__item\">rejestr ryzyk z histori\u0105 decyzji i datami przegl\u0105d\u00f3w<\/li><li class=\"risk-evid__item\">wyniki przegl\u0105d\u00f3w ryzyka i uprawnie\u0144 personelu<\/li><li class=\"risk-evid__item\">logi z ci\u0105g\u0142ego monitoringu systemu informacyjnego<\/li><li class=\"risk-evid__item\">potwierdzenia test\u00f3w plan\u00f3w BCP, ISCP i DRP<\/li><li class=\"risk-evid__item\">\u015blady zarz\u0105dzania podatno\u015bciami i aktualizacjami<\/li><li class=\"risk-evid__item\">raporty dzia\u0142a\u0144 naprawczych po incydentach<\/li><li class=\"risk-evid__item\">aktualny wykaz dostawc\u00f3w ICT i ocena ryzyka \u0142a\u0144cucha dostaw<\/li><li class=\"risk-evid__item\">dokumentacj\u0119 normatywn\u0105 i operacyjn\u0105 SZBI zgodn\u0105 z art. 8 uKSC<\/li><\/ul>\n\n<h2>Jakich b\u0142\u0119d\u00f3w unika\u0107, gdy analiza ryzyka IT jest prowadzona pod KSC\/NIS2?<\/h2>\n\n<p>Najcz\u0119stszy b\u0142\u0105d to traktowanie analizy jako jednorazowego dokumentu, bez aktualizacji po zmianach i incydentach. Drugi b\u0142\u0105d to zaw\u0119\u017cenie procesu wy\u0142\u0105cznie do warstwy technicznej, bez oceny ludzi, proces\u00f3w i dostawc\u00f3w, co sztucznie zani\u017ca realny poziom ryzyka. Trzecim problemem jest brak mierzalnych dowod\u00f3w wdro\u017cenia \u015brodk\u00f3w oraz niesp\u00f3jne kryteria akceptacji ryzyka mi\u0119dzy dzia\u0142ami. Czwarty, cz\u0119sty w praktyce b\u0142\u0105d to traktowanie \u0142a\u0144cucha dostaw jako zagadnienia wy\u0142\u0105cznie prawnego \u2014 bez technicznej inwentaryzacji dostawc\u00f3w i bie\u017c\u0105cego monitoringu ich podatno\u015bci analiza ryzyka pozostaje niepe\u0142na, niezale\u017cnie od tego, jak dobrze wygl\u0105da warstwa umowna.<\/p>\n\n<h2>Jak cz\u0119sto przeprowadza\u0107 analiz\u0119 ryzyka i kiedy j\u0105 aktualizowa\u0107?<\/h2>\n\n<p>Pe\u0142na analiza ryzyka powinna by\u0107 cykliczna, a aktualizacje powinny nast\u0119powa\u0107 zawsze po istotnej zmianie technologicznej, organizacyjnej lub po incydencie. W praktyce organizacje dojrza\u0142e utrzymuj\u0105 kwartalne przegl\u0105dy ryzyk krytycznych i roczny przegl\u0105d ca\u0142o\u015bciowy, wsparty ci\u0105g\u0142ym monitoringiem. Taki rytm u\u0142atwia utrzymanie zgodno\u015bci i przygotowanie do audytu bez \u201eakcji ratunkowej\u201d tu\u017c przed kontrol\u0105.<\/p>\n\n<h2>Jak prze\u0142o\u017cy\u0107 analiz\u0119 ryzyka na plan dzia\u0142a\u0144 i bud\u017cet cyberbezpiecze\u0144stwa?<\/h2>\n\n<p>Analiza ryzyka powinna ko\u0144czy\u0107 si\u0119 planem post\u0119powania z ryzykiem, z w\u0142a\u015bcicielami, terminami i miernikami skuteczno\u015bci. Priorytet nale\u017cy nada\u0107 ryzykom przekraczaj\u0105cym apetyt na ryzyko organizacji oraz tym, kt\u00f3re mog\u0105 przerwa\u0107 \u015bwiadczenie us\u0142ug kluczowych. W praktyce bud\u017cet warto \u0142\u0105czy\u0107 z kosztem unikni\u0119tej straty, czasem przywr\u00f3cenia us\u0142ug i redukcj\u0105 ekspozycji na sankcje \u2014 to zamienia compliance z obci\u0105\u017cenia formalnego w narz\u0119dzie sterowania odporno\u015bci\u0105 organizacji.<\/p>\n\n<h2>Jak Inteca wspiera analiz\u0119 ryzyka i wdro\u017cenie technicznych \u015brodk\u00f3w KSC\/NIS2?<\/h2>\n\n<p>Inteca wspiera organizacje w technicznym przygotowaniu do KSC\/NIS2: od audytu technicznego, przez wdro\u017cenie \u015brodk\u00f3w technicznych i dokumentacji technicznej, po monitoring, obs\u0142ug\u0119 incydent\u00f3w i utrzymanie gotowo\u015bci audytowej. IAM, MFA i Keycloak s\u0105 jednym z modu\u0142\u00f3w tego wdro\u017cenia, a nie jego jedynym zakresem. Warstw\u0119 prawn\u0105 \u2014 kwalifikacj\u0119 podmiotu i dokumentacj\u0119 SZBI w warstwie prawnej \u2014 Inteca realizuje we wsp\u00f3\u0142pracy z kancelari\u0105, nie samodzielnie.<\/p>\n\n<p>W praktyce wsp\u00f3\u0142praca zaczyna si\u0119 od Etapu 1 \u2014 audytu technicznego (5 900 PLN netto, ok. 2 tygodnie), realizowanego na podstawie self-assessment klienta wed\u0142ug kwestionariusza Inteca: inwentaryzacja aktyw\u00f3w, system\u00f3w, to\u017csamo\u015bci i uprawnie\u0144, audyt infrastruktury pod k\u0105tem art. 8 uKSC oraz wst\u0119pny skan podatno\u015bci. Wynik tego etapu \u2014 raport luk technicznych i wsad do wsp\u00f3lnej oceny ryzyka \u2014 jest podstaw\u0105 do zaplanowania <a href=\"https:\/\/inteca.com\/pl\/insighty-biznesowe\/wdrozenie-nis2-wymagania-techniczne\/\">Etapu 2, czyli wdro\u017cenia technicznego<\/a> (od 15 000 PLN netto): IAM z MFA opartym o FIDO2\/WebAuthn, zarz\u0105dzania podatno\u015bciami, monitoringu bezpiecze\u0144stwa (SIEM), ci\u0105g\u0142o\u015bci dzia\u0142ania, bezpiecze\u0144stwa \u0142a\u0144cucha dostaw, kryptografii i dokumentacji technicznej gotowej na audyt. Organizacje, kt\u00f3re chc\u0105 utrzyma\u0107 gotowo\u015b\u0107 audytow\u0105 w czasie, mog\u0105 dodatkowo skorzysta\u0107 z opcjonalnego Etapu 3 \u2014 utrzymania w modelu Managed Service (od 2 900 PLN netto\/mc).<\/p>\n\n<div class=\"risk-cta\"><p>Zacznij od <a href=\"https:\/\/inteca.com\/pl\/ustawa-o-krajowym-systemie-cyberbezpieczenstwa\/\">audytu technicznego KSC\/NIS2<\/a> (Etap 1, 5 900 PLN netto, self-assessment ok. 2 tygodnie). Inteca \u0142\u0105czy audyt techniczny i analiz\u0119 dojrza\u0142o\u015bci z wdro\u017ceniem \u015brodk\u00f3w technicznych (Etap 2), aby organizacja wiedzia\u0142a, kt\u00f3re \u015brodki s\u0105 naprawd\u0119 potrzebne, zamiast wdra\u017ca\u0107 wszystko naraz. Kwalifikacj\u0119 prawn\u0105 obowi\u0105zk\u00f3w \u2014 czy podmiot jest kluczowy, czy wa\u017cny \u2014 prowadzi kancelaria, we wsp\u00f3\u0142pracy z kt\u00f3r\u0105 Inteca koordynuje wsp\u00f3lny plan dzia\u0142a\u0144.<\/p><\/div>\n\n<style>.risk-cta{font-family:'Poppins',-apple-system,BlinkMacSystemFont,sans-serif;position:relative;margin:32px 0;padding:26px 28px 24px;background:linear-gradient(135deg,#19242f 0%,#2f4b5c 140%);border-radius:14px;box-shadow:0 6px 28px rgba(25,36,47,.18)}.risk-cta::before{content:\"Kolejny krok\";display:inline-block;margin:0 0 10px;padding:4px 12px;background:#d35400;color:#fff;font-size:11px;font-weight:600;letter-spacing:1px;text-transform:uppercase;border-radius:20px}.risk-cta p{margin:0;font-size:15.5px;font-weight:300;line-height:1.65;color:#f2f5f7}.risk-cta a{color:#8fd3f4;font-weight:500;text-decoration:none;border-bottom:1px solid rgba(143,211,244,.5)}.risk-cta a:hover{color:#fff;border-bottom-color:#fff}@media (max-width:600px){.risk-cta{padding:22px 20px 20px}.risk-cta p{font-size:14.5px}}<\/style>\n\n<h2>\u0179r\u00f3d\u0142a:<\/h2>\n\n<div class=\"risk-src-box\"><ul class=\"risk-src\"><li class=\"risk-src__item\"><span class=\"risk-src__pub\">Ministerstwo Cyfryzacji<\/span><a class=\"risk-src__title risk-src__link\" href=\"https:\/\/cyber.gov.pl\/faq\" target=\"_blank\" rel=\"nofollow noopener\">Ustawa z dnia 5 lipca 2018 r. o krajowym systemie cyberbezpiecze\u0144stwa po nowelizacji. Pytania i odpowiedzi.<\/a><\/li><li class=\"risk-src__item\"><span class=\"risk-src__pub\">ISAP<\/span><a class=\"risk-src__title risk-src__link\" href=\"https:\/\/isap.sejm.gov.pl\/isap.nsf\/DocDetails.xsp?id=WDU20180001560\" target=\"_blank\" rel=\"nofollow noopener\">Ustawa z dnia 5 lipca 2018 r. o krajowym systemie cyberbezpiecze\u0144stwa<\/a><\/li><li class=\"risk-src__item\"><span class=\"risk-src__pub\">EUR-Lex<\/span><a class=\"risk-src__title risk-src__link\" href=\"https:\/\/eur-lex.europa.eu\/legal-content\/PL\/TXT\/?uri=CELEX:32022L2555\" target=\"_blank\" rel=\"nofollow noopener\">Dyrektywa Parlamentu Europejskiego i Rady (UE) 2022\/2555 (NIS2)<\/a><\/li><li class=\"risk-src__item\"><span class=\"risk-src__pub\">EUR-Lex<\/span><a class=\"risk-src__title risk-src__link\" href=\"https:\/\/eur-lex.europa.eu\/legal-content\/PL\/TXT\/?uri=CELEX:32024R2690\" target=\"_blank\" rel=\"nofollow noopener\">Rozporz\u0105dzenie wykonawcze Komisji (UE) 2024\/2690<\/a><\/li><li class=\"risk-src__item\"><span class=\"risk-src__pub\">ISO<\/span><a class=\"risk-src__title risk-src__link\" href=\"https:\/\/www.iso.org\/standard\/80585.html\" target=\"_blank\" rel=\"nofollow noopener\">ISO\/IEC 27005 \u2014 Information security, cybersecurity and privacy protection<\/a><\/li><li class=\"risk-src__item\"><span class=\"risk-src__pub\">ISO<\/span><a class=\"risk-src__title risk-src__link\" href=\"https:\/\/www.iso.org\/standard\/27001\" target=\"_blank\" rel=\"nofollow noopener\">ISO\/IEC 27001 \u2014 Information security management systems<\/a><\/li><li class=\"risk-src__item\"><span class=\"risk-src__pub\">NIST<\/span><a class=\"risk-src__title risk-src__link\" href=\"https:\/\/csrc.nist.gov\/pubs\/sp\/800\/30\/r1\/final\" target=\"_blank\" rel=\"nofollow noopener\">NIST SP 800-30 Rev.1 \u2014 Guide for Conducting Risk Assessments<\/a><\/li><li class=\"risk-src__item\"><span class=\"risk-src__pub\">ANSSI<\/span><a class=\"risk-src__title risk-src__link\" href=\"https:\/\/cyber.gouv.fr\/en\/publications\/ebios-risk-manager-method\" target=\"_blank\" rel=\"nofollow noopener\">EBIOS Risk Manager \u2014 metoda analizy ryzyka<\/a><\/li><li class=\"risk-src__item\"><span class=\"risk-src__pub\">FAIR Institute<\/span><a class=\"risk-src__title risk-src__link\" href=\"https:\/\/www.fairinstitute.org\/what-is-fair\" target=\"_blank\" rel=\"nofollow noopener\">What is FAIR \u2014 Factor Analysis of Information Risk<\/a><\/li><li class=\"risk-src__item\"><span class=\"risk-src__pub\">ENISA<\/span><a class=\"risk-src__title risk-src__link\" href=\"https:\/\/www.enisa.europa.eu\/topics\/supply-chain-security\/supply-chain-security-for-icts\" target=\"_blank\" rel=\"nofollow noopener\">ICT supply chain security<\/a><\/li><li class=\"risk-src__item\"><span class=\"risk-src__pub\">gov.pl<\/span><a class=\"risk-src__title risk-src__link\" href=\"https:\/\/www.gov.pl\/web\/system-s46\" target=\"_blank\" rel=\"nofollow noopener\">System S46<\/a><\/li><\/ul><\/div>\n\n<style>.risk-evid,.risk-src-box{font-family:'Poppins',-apple-system,BlinkMacSystemFont,sans-serif}.risk-evid{list-style:none;margin:28px 0 32px;padding:0;display:grid;grid-template-columns:repeat(2,1fr);gap:10px}.risk-evid__item{position:relative;margin:0;padding:14px 18px 14px 48px;background:#f8f9fb;border:1px solid rgba(127,140,141,.18);border-radius:10px;font-size:14.5px;font-weight:300;line-height:1.55;color:#555;list-style:none;transition:background .25s ease,border-color .25s ease,color .25s ease}.risk-evid__item::marker{content:\"\"}.risk-evid__item::before{content:\"\";position:absolute;left:18px;top:16px;width:12px;height:15px;border:1.5px solid #3e7c93;border-radius:2px;opacity:.75;background:linear-gradient(to right,#3e7c93 0,#3e7c93 100%) no-repeat 2px 3px\/7px 1.5px,linear-gradient(to right,#3e7c93 0,#3e7c93 100%) no-repeat 2px 6.5px\/7px 1.5px,linear-gradient(to right,#3e7c93 0,#3e7c93 100%) no-repeat 2px 10px\/5px 1.5px;transition:opacity .25s ease}.risk-evid__item:hover{background:#fff;border-color:rgba(62,124,147,.35);color:#1a1a2e}.risk-evid__item:hover::before{opacity:1}.risk-src-box{margin:28px 0 32px}.risk-src-box .risk-src{list-style:none;margin:0;padding:0;border-top:1px solid rgba(127,140,141,.18)}.risk-src-box .risk-src__item{position:relative;margin:0;padding:14px 18px 14px 20px;border-bottom:1px solid rgba(127,140,141,.14);font-size:14.5px;font-weight:300;line-height:1.55;color:#555;list-style:none;transition:background .25s ease}.risk-src-box .risk-src__item::marker{content:\"\"}.risk-src-box .risk-src__item::before{content:\"\";position:absolute;left:0;top:0;bottom:0;width:3px;background:transparent;transition:background .25s ease}.risk-src-box .risk-src__item:hover{background:rgba(62,124,147,.04)}.risk-src-box .risk-src__item:hover::before{background:#d35400}.risk-src-box .risk-src__pub{display:block;margin-bottom:3px;font-size:11px;font-weight:600;letter-spacing:1.5px;text-transform:uppercase;color:#3e7c93}.risk-src-box .risk-src__title{display:block;color:#1a1a2e;font-weight:400}.risk-src-box .risk-src__link{color:#2f5f70;text-decoration:none;border-bottom:1px solid rgba(62,124,147,.35);transition:color .25s ease,border-color .25s ease;word-break:break-word}.risk-src-box .risk-src__link:hover{color:#d35400;border-bottom-color:#d35400}@media (max-width:768px){.risk-evid{grid-template-columns:1fr}}@media (max-width:600px){.risk-evid__item{padding:13px 16px 13px 44px;font-size:14px}.risk-evid__item::before{left:16px;top:15px}.risk-src-box .risk-src__item{padding:13px 14px 13px 16px;font-size:14px}}<\/style>\n\n\n\n<style>.kb-row-layout-id25338_97836a-11 > .kt-row-column-wrap{align-content:start;}:where(.kb-row-layout-id25338_97836a-11 > .kt-row-column-wrap) > .wp-block-kadence-column{justify-content:start;}.kb-row-layout-id25338_97836a-11 > .kt-row-column-wrap{column-gap:var(--global-kb-gap-md, 2rem);row-gap:var(--global-kb-gap-md, 2rem);max-width:var( --global-content-width, 1350px );padding-left:var(--global-content-edge-padding);padding-right:var(--global-content-edge-padding);padding-top:46px;padding-right:0px;padding-bottom:56px;padding-left:0px;grid-template-columns:minmax(0, 1fr);}.kb-row-layout-id25338_97836a-11 > .kt-row-layout-overlay{opacity:0.30;}@media all and (max-width: 1024px){.kb-row-layout-id25338_97836a-11 > .kt-row-column-wrap{grid-template-columns:minmax(0, 1fr);}}@media all and (max-width: 767px){.kb-row-layout-id25338_97836a-11 > .kt-row-column-wrap{grid-template-columns:minmax(0, 1fr);}}<\/style><div class=\"kb-row-layout-wrap kb-row-layout-id25338_97836a-11 alignfull wp-block-kadence-rowlayout\" id=\"faq\"><div class=\"kt-row-column-wrap kt-has-1-columns kt-row-layout-equal kt-tab-layout-inherit kt-mobile-layout-row kt-row-valign-top kt-inner-column-height-full kb-theme-content-width\">\n<style>.kadence-column25338_d09c7a-1f > .kt-inside-inner-col,.kadence-column25338_d09c7a-1f > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column25338_d09c7a-1f > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column25338_d09c7a-1f > .kt-inside-inner-col{flex-direction:column;}.kadence-column25338_d09c7a-1f > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column25338_d09c7a-1f > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column25338_d09c7a-1f{position:relative;}@media all and (max-width: 1024px){.kadence-column25338_d09c7a-1f > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column25338_d09c7a-1f > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column25338_d09c7a-1f\"><div class=\"kt-inside-inner-col\"><style>.wp-block-kadence-advancedheading.kt-adv-heading25338_793f5c-2e, .wp-block-kadence-advancedheading.kt-adv-heading25338_793f5c-2e[data-kb-block=\"kb-adv-heading25338_793f5c-2e\"]{padding-bottom:0px;margin-bottom:12px;text-align:left;font-size:11px;font-weight:600;font-style:normal;font-family:Poppins;text-transform:uppercase;letter-spacing:1.5px;color:#3e7c93;}.wp-block-kadence-advancedheading.kt-adv-heading25338_793f5c-2e mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading25338_793f5c-2e[data-kb-block=\"kb-adv-heading25338_793f5c-2e\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading25338_793f5c-2e img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading25338_793f5c-2e[data-kb-block=\"kb-adv-heading25338_793f5c-2e\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<p class=\"kt-adv-heading25338_793f5c-2e wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading25338_793f5c-2e\">FAQ<\/p>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading25338_02cb97-3e, .wp-block-kadence-advancedheading.kt-adv-heading25338_02cb97-3e[data-kb-block=\"kb-adv-heading25338_02cb97-3e\"]{padding-top:0px;margin-top:0px;margin-bottom:56px;text-align:left;font-size:40px;font-weight:500;font-style:normal;font-family:Poppins;letter-spacing:-0.5px;color:#1a1a2e;}.wp-block-kadence-advancedheading.kt-adv-heading25338_02cb97-3e mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading25338_02cb97-3e[data-kb-block=\"kb-adv-heading25338_02cb97-3e\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading25338_02cb97-3e img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading25338_02cb97-3e[data-kb-block=\"kb-adv-heading25338_02cb97-3e\"] img.kb-inline-image{width:150px;vertical-align:baseline;}@media all and (max-width: 767px){.wp-block-kadence-advancedheading.kt-adv-heading25338_02cb97-3e, .wp-block-kadence-advancedheading.kt-adv-heading25338_02cb97-3e[data-kb-block=\"kb-adv-heading25338_02cb97-3e\"]{font-size:var(--global-kb-font-size-lg, 2rem);}}<\/style>\n<h2 class=\"kt-adv-heading25338_02cb97-3e wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading25338_02cb97-3e\">Najwa\u017cniejsze pytania o <mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-theme-palette-1-color\">analiz\u0119 ryzyka w cyberbezpiecze\u0144stwie<\/mark> <\/h2>\n\n\n<style>.kt-accordion-id25338_72eec7-34 .kt-accordion-inner-wrap{column-gap:var(--global-kb-gap-md, 2rem);row-gap:0px;}.kt-accordion-id25338_72eec7-34 .kt-accordion-panel-inner{border-top:0px solid var(--global-palette7, #EDF2F7);border-right:0px solid var(--global-palette7, #EDF2F7);border-bottom:0px solid var(--global-palette7, #EDF2F7);border-left:0px solid var(--global-palette7, #EDF2F7);padding-top:var(--global-kb-spacing-sm, 1.5rem);padding-right:var(--global-kb-spacing-sm, 1.5rem);padding-bottom:var(--global-kb-spacing-sm, 1.5rem);padding-left:var(--global-kb-spacing-sm, 1.5rem);}.kt-accordion-id25338_72eec7-34 > .kt-accordion-inner-wrap > .wp-block-kadence-pane > .kt-accordion-header-wrap > .kt-blocks-accordion-header{border-top:1px solid rgba(127,140,141,0.12);border-right:0px solid var(--global-palette7, #EDF2F7);border-bottom:1px solid rgba(127,140,141,0.12);border-left:0px solid var(--global-palette7, #EDF2F7);border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;background:rgba(242,242,242,0);font-size:16px;line-height:1.2;font-family:Poppins;font-weight:500;color:#1a1a2e;padding-top:var(--global-kb-spacing-sm, 1.5rem);padding-right:var(--global-kb-spacing-sm, 1.5rem);padding-bottom:var(--global-kb-spacing-sm, 1.5rem);padding-left:var(--global-kb-spacing-sm, 1.5rem);}.kt-accordion-id25338_72eec7-34:not( .kt-accodion-icon-style-basiccircle ):not( .kt-accodion-icon-style-xclosecircle ):not( .kt-accodion-icon-style-arrowcircle )  > .kt-accordion-inner-wrap > .wp-block-kadence-pane > .kt-accordion-header-wrap .kt-blocks-accordion-icon-trigger:after, .kt-accordion-id25338_72eec7-34:not( .kt-accodion-icon-style-basiccircle ):not( .kt-accodion-icon-style-xclosecircle ):not( .kt-accodion-icon-style-arrowcircle )  > .kt-accordion-inner-wrap > .wp-block-kadence-pane > .kt-accordion-header-wrap .kt-blocks-accordion-icon-trigger:before{background:#6b7280;}.kt-accordion-id25338_72eec7-34 .kt-accordion-panel-inner, .kt-accordion-id25338_72eec7-34 .kt-accordion-panel-inner h1, .kt-accordion-id25338_72eec7-34 .kt-accordion-panel-inner h2, .kt-accordion-id25338_72eec7-34 .kt-accordion-panel-inner h3, .kt-accordion-id25338_72eec7-34 .kt-accordion-panel-inner h4, .kt-accordion-id25338_72eec7-34 .kt-accordion-panel-inner h5, .kt-accordion-id25338_72eec7-34 .kt-accordion-panel-inner h6{color:#6b7280;}.kt-accordion-id25338_72eec7-34:not( .kt-accodion-icon-style-basic ):not( .kt-accodion-icon-style-xclose ):not( .kt-accodion-icon-style-arrow ) .kt-blocks-accordion-icon-trigger{background:#6b7280;}.kt-accordion-id25338_72eec7-34:not( .kt-accodion-icon-style-basic ):not( .kt-accodion-icon-style-xclose ):not( .kt-accodion-icon-style-arrow ) .kt-blocks-accordion-icon-trigger:after, .kt-accordion-id25338_72eec7-34:not( .kt-accodion-icon-style-basic ):not( .kt-accodion-icon-style-xclose ):not( .kt-accodion-icon-style-arrow ) .kt-blocks-accordion-icon-trigger:before{background:rgba(242,242,242,0);}.kt-accordion-id25338_72eec7-34 > .kt-accordion-inner-wrap > .wp-block-kadence-pane > .kt-accordion-header-wrap > .kt-blocks-accordion-header:hover, \n\t\t\t\tbody:not(.hide-focus-outline) .kt-accordion-id25338_72eec7-34 .kt-blocks-accordion-header:focus-visible{color:var(--global-palette1, #3182CE);background:rgba(238,238,238,0);border-top-color:var(--global-palette7, #EDF2F7);border-top-style:solid;border-right-color:var(--global-palette7, #EDF2F7);border-right-style:solid;border-bottom:1px solid var(--global-palette7, #EDF2F7);border-left-color:var(--global-palette7, #EDF2F7);border-left-style:solid;}.kt-accordion-id25338_72eec7-34:not( .kt-accodion-icon-style-basiccircle ):not( .kt-accodion-icon-style-xclosecircle ):not( .kt-accodion-icon-style-arrowcircle ) .kt-accordion-header-wrap .kt-blocks-accordion-header:hover .kt-blocks-accordion-icon-trigger:after, .kt-accordion-id25338_72eec7-34:not( .kt-accodion-icon-style-basiccircle ):not( .kt-accodion-icon-style-xclosecircle ):not( .kt-accodion-icon-style-arrowcircle ) .kt-accordion-header-wrap .kt-blocks-accordion-header:hover .kt-blocks-accordion-icon-trigger:before, body:not(.hide-focus-outline) .kt-accordion-id25338_72eec7-34:not( .kt-accodion-icon-style-basiccircle ):not( .kt-accodion-icon-style-xclosecircle ):not( .kt-accodion-icon-style-arrowcircle ) .kt-blocks-accordion--visible .kt-blocks-accordion-icon-trigger:after, body:not(.hide-focus-outline) .kt-accordion-id25338_72eec7-34:not( .kt-accodion-icon-style-basiccircle ):not( .kt-accodion-icon-style-xclosecircle ):not( .kt-accodion-icon-style-arrowcircle ) .kt-blocks-accordion-header:focus-visible .kt-blocks-accordion-icon-trigger:before{background:#3e7c93;}.kt-accordion-id25338_72eec7-34:not( .kt-accodion-icon-style-basic ):not( .kt-accodion-icon-style-xclose ):not( .kt-accodion-icon-style-arrow ) .kt-accordion-header-wrap .kt-blocks-accordion-header:hover .kt-blocks-accordion-icon-trigger, body:not(.hide-focus-outline) .kt-accordion-id25338_72eec7-34:not( .kt-accodion-icon-style-basic ):not( .kt-accodion-icon-style-xclose ):not( .kt-accodion-icon-style-arrow ) .kt-accordion-header-wrap .kt-blocks-accordion-header:focus-visible .kt-blocks-accordion-icon-trigger{background:#3e7c93;}.kt-accordion-id25338_72eec7-34:not( .kt-accodion-icon-style-basic ):not( .kt-accodion-icon-style-xclose ):not( .kt-accodion-icon-style-arrow ) .kt-accordion-header-wrap .kt-blocks-accordion-header:hover .kt-blocks-accordion-icon-trigger:after, .kt-accordion-id25338_72eec7-34:not( .kt-accodion-icon-style-basic ):not( .kt-accodion-icon-style-xclose ):not( .kt-accodion-icon-style-arrow ) .kt-accordion-header-wrap .kt-blocks-accordion-header:hover .kt-blocks-accordion-icon-trigger:before, body:not(.hide-focus-outline) .kt-accordion-id25338_72eec7-34:not( .kt-accodion-icon-style-basic ):not( .kt-accodion-icon-style-xclose ):not( .kt-accodion-icon-style-arrow ) .kt-accordion-header-wrap .kt-blocks-accordion-header:focus-visible .kt-blocks-accordion-icon-trigger:after, body:not(.hide-focus-outline) .kt-accordion-id25338_72eec7-34:not( .kt-accodion-icon-style-basic ):not( .kt-accodion-icon-style-xclose ):not( .kt-accodion-icon-style-arrow ) .kt-accordion-header-wrap .kt-blocks-accordion-header:focus-visible .kt-blocks-accordion-icon-trigger:before{background:rgba(238,238,238,0);}.kt-accordion-id25338_72eec7-34 .kt-accordion-header-wrap .kt-blocks-accordion-header:focus-visible,\n\t\t\t\t.kt-accordion-id25338_72eec7-34 > .kt-accordion-inner-wrap > .wp-block-kadence-pane > .kt-accordion-header-wrap > .kt-blocks-accordion-header.kt-accordion-panel-active{color:var(--global-palette1, #3182CE);background:rgba(68,68,68,0);border-top-color:var(--global-palette7, #EDF2F7);border-top-style:solid;border-right-color:var(--global-palette7, #EDF2F7);border-right-style:solid;border-bottom:1px solid var(--global-palette7, #EDF2F7);border-left-color:var(--global-palette7, #EDF2F7);border-left-style:solid;}.kt-accordion-id25338_72eec7-34:not( .kt-accodion-icon-style-basiccircle ):not( .kt-accodion-icon-style-xclosecircle ):not( .kt-accodion-icon-style-arrowcircle )  > .kt-accordion-inner-wrap > .wp-block-kadence-pane > .kt-accordion-header-wrap > .kt-blocks-accordion-header.kt-accordion-panel-active .kt-blocks-accordion-icon-trigger:after, .kt-accordion-id25338_72eec7-34:not( .kt-accodion-icon-style-basiccircle ):not( .kt-accodion-icon-style-xclosecircle ):not( .kt-accodion-icon-style-arrowcircle )  > .kt-accordion-inner-wrap > .wp-block-kadence-pane > .kt-accordion-header-wrap > .kt-blocks-accordion-header.kt-accordion-panel-active .kt-blocks-accordion-icon-trigger:before{background:var(--global-palette1, #3182CE);}.kt-accordion-id25338_72eec7-34:not( .kt-accodion-icon-style-basic ):not( .kt-accodion-icon-style-xclose ):not( .kt-accodion-icon-style-arrow ) .kt-blocks-accordion-header.kt-accordion-panel-active .kt-blocks-accordion-icon-trigger{background:var(--global-palette1, #3182CE);}.kt-accordion-id25338_72eec7-34:not( .kt-accodion-icon-style-basic ):not( .kt-accodion-icon-style-xclose ):not( .kt-accodion-icon-style-arrow ) .kt-blocks-accordion-header.kt-accordion-panel-active .kt-blocks-accordion-icon-trigger:after, .kt-accordion-id25338_72eec7-34:not( .kt-accodion-icon-style-basic ):not( .kt-accodion-icon-style-xclose ):not( .kt-accodion-icon-style-arrow ) .kt-blocks-accordion-header.kt-accordion-panel-active .kt-blocks-accordion-icon-trigger:before{background:rgba(68,68,68,0);}@media all and (max-width: 1024px){.kt-accordion-id25338_72eec7-34 .kt-accordion-panel-inner{border-top:0px solid var(--global-palette7, #EDF2F7);border-right:0px solid var(--global-palette7, #EDF2F7);border-bottom:0px solid var(--global-palette7, #EDF2F7);border-left:0px solid var(--global-palette7, #EDF2F7);}}@media all and (max-width: 1024px){.kt-accordion-id25338_72eec7-34 > .kt-accordion-inner-wrap > .wp-block-kadence-pane > .kt-accordion-header-wrap > .kt-blocks-accordion-header{border-top:1px solid rgba(127,140,141,0.12);border-right:0px solid var(--global-palette7, #EDF2F7);border-bottom:1px solid rgba(127,140,141,0.12);border-left:0px solid var(--global-palette7, #EDF2F7);}}@media all and (max-width: 1024px){.kt-accordion-id25338_72eec7-34 > .kt-accordion-inner-wrap > .wp-block-kadence-pane > .kt-accordion-header-wrap > .kt-blocks-accordion-header:hover, \n\t\t\t\tbody:not(.hide-focus-outline) .kt-accordion-id25338_72eec7-34 .kt-blocks-accordion-header:focus-visible{border-top-color:var(--global-palette7, #EDF2F7);border-top-style:solid;border-right-color:var(--global-palette7, #EDF2F7);border-right-style:solid;border-bottom:1px solid var(--global-palette7, #EDF2F7);border-left-color:var(--global-palette7, #EDF2F7);border-left-style:solid;}}@media all and (max-width: 1024px){.kt-accordion-id25338_72eec7-34 .kt-accordion-header-wrap .kt-blocks-accordion-header:focus-visible,\n\t\t\t\t.kt-accordion-id25338_72eec7-34 > .kt-accordion-inner-wrap > .wp-block-kadence-pane > .kt-accordion-header-wrap > .kt-blocks-accordion-header.kt-accordion-panel-active{border-top-color:var(--global-palette7, #EDF2F7);border-top-style:solid;border-right-color:var(--global-palette7, #EDF2F7);border-right-style:solid;border-bottom:1px solid var(--global-palette7, #EDF2F7);border-left-color:var(--global-palette7, #EDF2F7);border-left-style:solid;}}@media all and (max-width: 767px){.kt-accordion-id25338_72eec7-34 .kt-accordion-inner-wrap{display:block;}.kt-accordion-id25338_72eec7-34 .kt-accordion-inner-wrap .kt-accordion-pane:not(:first-child){margin-top:0px;}.kt-accordion-id25338_72eec7-34 .kt-accordion-panel-inner{border-top:0px solid var(--global-palette7, #EDF2F7);border-right:0px solid var(--global-palette7, #EDF2F7);border-bottom:0px solid var(--global-palette7, #EDF2F7);border-left:0px solid var(--global-palette7, #EDF2F7);}.kt-accordion-id25338_72eec7-34 > .kt-accordion-inner-wrap > .wp-block-kadence-pane > .kt-accordion-header-wrap > .kt-blocks-accordion-header{border-top:1px solid rgba(127,140,141,0.12);border-right:0px solid var(--global-palette7, #EDF2F7);border-bottom:1px solid rgba(127,140,141,0.12);border-left:0px solid var(--global-palette7, #EDF2F7);}.kt-accordion-id25338_72eec7-34 > .kt-accordion-inner-wrap > .wp-block-kadence-pane > .kt-accordion-header-wrap > .kt-blocks-accordion-header:hover, \n\t\t\t\tbody:not(.hide-focus-outline) .kt-accordion-id25338_72eec7-34 .kt-blocks-accordion-header:focus-visible{border-top-color:var(--global-palette7, #EDF2F7);border-top-style:solid;border-right-color:var(--global-palette7, #EDF2F7);border-right-style:solid;border-bottom:1px solid var(--global-palette7, #EDF2F7);border-left-color:var(--global-palette7, #EDF2F7);border-left-style:solid;}.kt-accordion-id25338_72eec7-34 .kt-accordion-header-wrap .kt-blocks-accordion-header:focus-visible,\n\t\t\t\t.kt-accordion-id25338_72eec7-34 > .kt-accordion-inner-wrap > .wp-block-kadence-pane > .kt-accordion-header-wrap > .kt-blocks-accordion-header.kt-accordion-panel-active{border-top-color:var(--global-palette7, #EDF2F7);border-top-style:solid;border-right-color:var(--global-palette7, #EDF2F7);border-right-style:solid;border-bottom:1px solid var(--global-palette7, #EDF2F7);border-left-color:var(--global-palette7, #EDF2F7);border-left-style:solid;}}<\/style>\n<div class=\"wp-block-kadence-accordion alignnone\"><div class=\"kt-accordion-wrap kt-accordion-id25338_72eec7-34 kt-accordion-has-20-panes kt-active-pane-0 kt-accordion-block kt-pane-header-alignment-left kt-accodion-icon-style-arrow kt-accodion-icon-side-right\" style=\"max-width:none\"><div class=\"kt-accordion-inner-wrap\" data-allow-multiple-open=\"false\" data-start-open=\"none\">\n<div class=\"wp-block-kadence-pane kt-accordion-pane kt-accordion-pane-1 kt-pane25338_1f581b-f2\"><h2 class=\"kt-accordion-header-wrap\"><button class=\"kt-blocks-accordion-header kt-acccordion-button-label-show\" type=\"button\"><span class=\"kt-blocks-accordion-title-wrap\"><span class=\"kt-blocks-accordion-title\">Czy analiza ryzyka i szacowanie ryzyka to to samo?<\/span><\/span><span class=\"kt-blocks-accordion-icon-trigger\"><\/span><\/button><\/h2><div class=\"kt-accordion-panel kt-accordion-panel-hidden\"><div class=\"kt-accordion-panel-inner\">\n<p class=\"has-theme-palette-5-color has-text-color\">Nie ca\u0142kiem, poniewa\u017c szacowanie ryzyka jest etapem analizy ryzyka. Analiza obejmuje te\u017c kontekst, decyzje o post\u0119powaniu z ryzykiem i monitorowanie skuteczno\u015bci \u015brodk\u00f3w.<\/p>\n<\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-kadence-pane kt-accordion-pane kt-accordion-pane-2 kt-pane25338_90e709-90\"><h2 class=\"kt-accordion-header-wrap\"><button class=\"kt-blocks-accordion-header kt-acccordion-button-label-show\" type=\"button\"><span class=\"kt-blocks-accordion-title-wrap\"><span class=\"kt-blocks-accordion-title\">Czy analiza ryzyka jest obowi\u0105zkowym dokumentem w KSC\/NIS2?<\/span><\/span><span class=\"kt-blocks-accordion-icon-trigger\"><\/span><\/button><\/h2><div class=\"kt-accordion-panel kt-accordion-panel-hidden\"><div class=\"kt-accordion-panel-inner\">\n<p class=\"has-theme-palette-4-color has-text-color\">Analiza ryzyka nie jest jednorazowym dokumentem, tylko obowi\u0105zkowym, cyklicznym procesem w ramach SZBI. Ustawa wymaga systematycznego szacowania ryzyka i zarz\u0105dzania nim, a wynik tego procesu musi by\u0107 udokumentowany \u2014 ale sama dokumentacja bez realnie dzia\u0142aj\u0105cego procesu nie wystarcza do wykazania zgodno\u015bci<\/p>\n<\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-kadence-pane kt-accordion-pane kt-accordion-pane-3 kt-pane25338_0ad8e2-1f\"><h2 class=\"kt-accordion-header-wrap\"><button class=\"kt-blocks-accordion-header kt-acccordion-button-label-show\" type=\"button\"><span class=\"kt-blocks-accordion-title-wrap\"><span class=\"kt-blocks-accordion-title\">Czy ka\u017cda organizacja obj\u0119ta KSC musi mie\u0107 SOC?<\/span><\/span><span class=\"kt-blocks-accordion-icon-trigger\"><\/span><\/button><\/h2><div class=\"kt-accordion-panel kt-accordion-panel-hidden\"><div class=\"kt-accordion-panel-inner\">\n<p class=\"has-theme-palette-4-color has-text-color\">Nie. FAQ ministerstwa wprost wskazuje, \u017ce nie ma narzuconych rozwi\u0105za\u0144 technicznych ani organizacyjnych w tym zakresie \u2014 organizacja sama decyduje, czy zbuduje w\u0142asne kompetencje, skorzysta z komercyjnego SOC, czy oprze monitoring na dobrze skonfigurowanym SIEM. Kluczowy jest ci\u0105g\u0142y, adekwatny do ryzyka monitoring, a nie konkretna nazwa rozwi\u0105zania.<\/p>\n<\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-kadence-pane kt-accordion-pane kt-accordion-pane-4 kt-pane25338_df2efd-88\"><h2 class=\"kt-accordion-header-wrap\"><button class=\"kt-blocks-accordion-header kt-acccordion-button-label-show\" type=\"button\"><span class=\"kt-blocks-accordion-title-wrap\"><span class=\"kt-blocks-accordion-title\">Czy ISO 27001 bez dodatkowych dzia\u0142a\u0144 daje zgodno\u015b\u0107 z KSC\/NIS2?<\/span><\/span><span class=\"kt-blocks-accordion-icon-trigger\"><\/span><\/button><\/h2><div class=\"kt-accordion-panel kt-accordion-panel-hidden\"><div class=\"kt-accordion-panel-inner\">\n<p class=\"has-theme-palette-4-color has-text-color\">Nie, bo ISO 27001 jest dobr\u0105 baz\u0105, ale nie zast\u0119puje obowi\u0105zk\u00f3w ustawowych KSC\/NIS2. Potrzebne s\u0105 dodatkowo m.in. wymagania raportowe, formalna odpowiedzialno\u015b\u0107 kierownictwa i dowody operacyjne.<\/p>\n<\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-kadence-pane kt-accordion-pane kt-accordion-pane-6 kt-pane25338_b15e56-0a\"><h2 class=\"kt-accordion-header-wrap\"><button class=\"kt-blocks-accordion-header kt-acccordion-button-label-show\" type=\"button\"><span class=\"kt-blocks-accordion-title-wrap\"><span class=\"kt-blocks-accordion-title\">Czy analiza ryzyka musi obejmowa\u0107 dostawc\u00f3w?<\/span><\/span><span class=\"kt-blocks-accordion-icon-trigger\"><\/span><\/button><\/h2><div class=\"kt-accordion-panel kt-accordion-panel-hidden\"><div class=\"kt-accordion-panel-inner\">\n<p>Tak. Bezpiecze\u0144stwo i ci\u0105g\u0142o\u015b\u0107 \u0142a\u0144cucha dostaw ICT jest odr\u0119bnym, obowi\u0105zkowym elementem SZBI. Organizacja musi zna\u0107 swoich bezpo\u015brednich dostawc\u00f3w, ocenia\u0107 zwi\u0105zane z nimi ryzyko, dba\u0107 o wymagania cyberbezpiecze\u0144stwa w umowach oraz monitorowa\u0107 podatno\u015bci sprz\u0119tu i oprogramowania, z kt\u00f3rego korzysta..<br><\/p>\n<\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-kadence-pane kt-accordion-pane kt-accordion-pane-10 kt-pane25338_e96367-f5\"><h2 class=\"kt-accordion-header-wrap\"><button class=\"kt-blocks-accordion-header kt-acccordion-button-label-show\" type=\"button\"><span class=\"kt-blocks-accordion-title-wrap\"><span class=\"kt-blocks-accordion-title\">Jak cz\u0119sto trzeba aktualizowa\u0107 analiz\u0119 ryzyka?<\/span><\/span><span class=\"kt-blocks-accordion-icon-trigger\"><\/span><\/button><\/h2><div class=\"kt-accordion-panel kt-accordion-panel-hidden\"><div class=\"kt-accordion-panel-inner\">\n<p>Analiza ryzyka powinna by\u0107 cykliczna \u2014 dojrza\u0142e organizacje prowadz\u0105 kwartalne przegl\u0105dy ryzyk krytycznych i roczny przegl\u0105d ca\u0142o\u015bciowy \u2014 oraz aktualizowana ka\u017cdorazowo po istotnej zmianie technologicznej, organizacyjnej lub po incydencie.<\/p>\n<\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-kadence-pane kt-accordion-pane kt-accordion-pane-17 kt-pane25338_9f672e-2a\"><h2 class=\"kt-accordion-header-wrap\"><button class=\"kt-blocks-accordion-header kt-acccordion-button-label-show\" type=\"button\"><span class=\"kt-blocks-accordion-title-wrap\"><span class=\"kt-blocks-accordion-title\">Od czego zacz\u0105\u0107 wdro\u017cenie technicznych \u015brodk\u00f3w bezpiecze\u0144stwa?<\/span><\/span><span class=\"kt-blocks-accordion-icon-trigger\"><\/span><\/button><\/h2><div class=\"kt-accordion-panel kt-accordion-panel-hidden\"><div class=\"kt-accordion-panel-inner\">\n<p>Naturalnym punktem startu jest audyt techniczny i inwentaryzacja aktyw\u00f3w, to\u017csamo\u015bci oraz uprawnie\u0144 \u2014 to on wskazuje, kt\u00f3re \u015brodki s\u0105 rzeczywi\u015bcie potrzebne. Dopiero na tej podstawie warto planowa\u0107 wdro\u017cenie IAM\/MFA, monitoringu, zarz\u0105dzania podatno\u015bciami czy zabezpiecze\u0144 \u0142a\u0144cucha dostaw.<\/p>\n<\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-kadence-pane kt-accordion-pane kt-accordion-pane-18 kt-pane25338_99e4ed-08\"><h2 class=\"kt-accordion-header-wrap\"><button class=\"kt-blocks-accordion-header kt-acccordion-button-label-show\" type=\"button\"><span class=\"kt-blocks-accordion-title-wrap\"><span class=\"kt-blocks-accordion-title\">Kto w organizacji odpowiada za analiz\u0119 ryzyka?<\/span><\/span><span class=\"kt-blocks-accordion-icon-trigger\"><\/span><\/button><\/h2><div class=\"kt-accordion-panel kt-accordion-panel-hidden\"><div class=\"kt-accordion-panel-inner\">\n<p>Odpowiedzialno\u015b\u0107 ponosi kierownik podmiotu kluczowego lub wa\u017cnego, a je\u015bli podmiotem zarz\u0105dza organ wieloosobowy i nie wskazano osoby odpowiedzialnej, odpowiedzialno\u015b\u0107 spoczywa na wszystkich jego cz\u0142onkach. Delegowanie zada\u0144 do zespo\u0142u IT lub zewn\u0119trznego dostawcy nie znosi tej odpowiedzialno\u015bci \u2014 decyzje o akceptacji ryzyka rezydualnego i finansowaniu \u015brodk\u00f3w musz\u0105 pozosta\u0107 po stronie kierownictwa.<\/p>\n<\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-kadence-pane kt-accordion-pane kt-accordion-pane-19 kt-pane25338_b514e5-ba\"><h2 class=\"kt-accordion-header-wrap\"><button class=\"kt-blocks-accordion-header kt-acccordion-button-label-show\" type=\"button\"><span class=\"kt-blocks-accordion-title-wrap\"><span class=\"kt-blocks-accordion-title\">Jakie metody analizy ryzyka s\u0105 rekomendowane dla zgodno\u015bci z KSC\/NIS2?<\/span><\/span><span class=\"kt-blocks-accordion-icon-trigger\"><\/span><\/button><\/h2><div class=\"kt-accordion-panel kt-accordion-panel-hidden\"><div class=\"kt-accordion-panel-inner\">\n<p>Najcz\u0119\u015bciej stosuje si\u0119 podej\u015bcie hybrydowe: ISO\/IEC 27005 jako ram\u0119 zarz\u0105dcz\u0105, EBIOS RM do scenariuszy ataku, NIST SP 800-30 do pog\u0142\u0119bionej oceny technicznej oraz FAIR do kwantyfikacji finansowej. Wyb\u00f3r nie jest przypadkowy \u2014 rozporz\u0105dzenie wykonawcze (UE) 2024\/2690 zosta\u0142o oparte na ISO\/IEC 27001 i ISO\/IEC 27002, wi\u0119c organizacja pracuj\u0105ca w tej logice prowadzi analiz\u0119 ryzyka zgodn\u0105 z punktem odniesienia przyj\u0119tym przez regulatora.<\/p>\n<\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-kadence-pane kt-accordion-pane kt-accordion-pane-20 kt-pane25338_007ef2-de\"><h2 class=\"kt-accordion-header-wrap\"><button class=\"kt-blocks-accordion-header kt-acccordion-button-label-show\" type=\"button\"><span class=\"kt-blocks-accordion-title-wrap\"><span class=\"kt-blocks-accordion-title\">Czy zbli\u017caj\u0105cy si\u0119 termin wpisu do wykazu (3 pa\u017adziernika 2026) przesuwa termin realizacji obowi\u0105zku analizy ryzyka?<\/span><\/span><span class=\"kt-blocks-accordion-icon-trigger\"><\/span><\/button><\/h2><div class=\"kt-accordion-panel kt-accordion-panel-hidden\"><div class=\"kt-accordion-panel-inner\">\n<p>Nie. Termin do 3 pa\u017adziernika 2026 r. dotyczy wy\u0142\u0105cznie wpisu do wykazu podmiot\u00f3w kluczowych i wa\u017cnych. Obowi\u0105zek systematycznego szacowania ryzyka i wdro\u017cenia SZBI powstaje z chwil\u0105 spe\u0142nienia przes\u0142anek uznania za podmiot kluczowy lub wa\u017cny, a nie od dnia wpisu do wykazu.<\/p>\n<\/div><\/div><\/div>\n<\/div><\/div><\/div>\n<\/div><\/div>\n\n<\/div><\/div>\n\n<style>.kadence-column25338_ba6224-29 > .kt-inside-inner-col,.kadence-column25338_ba6224-29 > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column25338_ba6224-29 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column25338_ba6224-29 > .kt-inside-inner-col{flex-direction:column;}.kadence-column25338_ba6224-29 > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column25338_ba6224-29 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column25338_ba6224-29{position:relative;}@media all and (max-width: 1024px){.kadence-column25338_ba6224-29 > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column25338_ba6224-29 > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column25338_ba6224-29\"><div class=\"kt-inside-inner-col\"><style>.kadence-column25338_d2fdbb-3d{max-width:1300px;margin-left:auto;margin-right:auto;}.wp-block-kadence-column.kb-section-dir-horizontal:not(.kb-section-md-dir-vertical)>.kt-inside-inner-col>.kadence-column25338_d2fdbb-3d{-webkit-flex:0 1 1300px;flex:0 1 1300px;max-width:unset;margin-left:unset;margin-right:unset;}.kadence-column25338_d2fdbb-3d > .kt-inside-inner-col{padding-top:0px;padding-bottom:0px;}.kadence-column25338_d2fdbb-3d > .kt-inside-inner-col,.kadence-column25338_d2fdbb-3d > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column25338_d2fdbb-3d > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column25338_d2fdbb-3d > .kt-inside-inner-col{flex-direction:column;}.kadence-column25338_d2fdbb-3d > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column25338_d2fdbb-3d > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column25338_d2fdbb-3d{position:relative;}.kadence-column25338_d2fdbb-3d, .kt-inside-inner-col > .kadence-column25338_d2fdbb-3d:not(.specificity){margin-top:0px;}@media all and (min-width: 1025px){.wp-block-kadence-column.kb-section-dir-horizontal>.kt-inside-inner-col>.kadence-column25338_d2fdbb-3d{-webkit-flex:0 1 1300px;flex:0 1 1300px;max-width:unset;margin-left:unset;margin-right:unset;}}@media all and (max-width: 1024px){.kadence-column25338_d2fdbb-3d > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.wp-block-kadence-column.kb-section-sm-dir-vertical:not(.kb-section-sm-dir-horizontal):not(.kb-section-sm-dir-specificity)>.kt-inside-inner-col>.kadence-column25338_d2fdbb-3d{max-width:1300px;-webkit-flex:1;flex:1;margin-left:auto;margin-right:auto;}.kadence-column25338_d2fdbb-3d > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column25338_d2fdbb-3d\"><div class=\"kt-inside-inner-col\"><style>.kb-row-layout-wrap.wp-block-kadence-rowlayout.kb-row-layout-id25338_604060-74{margin-top:10px;margin-bottom:10px;}.kb-row-layout-id25338_604060-74 > .kt-row-column-wrap{align-content:start;}:where(.kb-row-layout-id25338_604060-74 > .kt-row-column-wrap) > .wp-block-kadence-column{justify-content:start;}.kb-row-layout-id25338_604060-74 > .kt-row-column-wrap{column-gap:var(--global-kb-gap-md, 2rem);row-gap:var(--global-kb-gap-md, 2rem);max-width:var( --global-content-width, 1350px );padding-left:var(--global-content-edge-padding);padding-right:var(--global-content-edge-padding);padding-top:44px;padding-right:44px;padding-bottom:40px;padding-left:44px;grid-template-columns:minmax(0, 1fr);}.kb-row-layout-id25338_604060-74{border-top-left-radius:20px;border-top-right-radius:20px;border-bottom-right-radius:20px;border-bottom-left-radius:20px;isolation:isolate;}.kb-row-layout-id25338_604060-74 > .kt-row-layout-overlay{border-top-left-radius:20px;border-top-right-radius:20px;border-bottom-right-radius:20px;border-bottom-left-radius:20px;}.kb-row-layout-id25338_604060-74{box-shadow:0px 20px 50px 0px rgba(25, 36, 47, 0.25);}.kb-row-layout-id25338_604060-74{background-image:linear-gradient(135deg,var(--global-palette3) 0%,rgb(25,36,47) 52%,var(--global-palette1) 100%);}.kb-row-layout-id25338_604060-74 > .kt-row-layout-overlay{opacity:0.30;background:linear-gradient(170deg,rgba(25,36,47,0) 77%,rgb(211,84,0) 100%);}@media all and (max-width: 1024px){.kb-row-layout-id25338_604060-74 > .kt-row-column-wrap{grid-template-columns:minmax(0, 1fr);}}@media all and (max-width: 767px){.kb-row-layout-id25338_604060-74 > .kt-row-column-wrap{grid-template-columns:minmax(0, 1fr);}}<\/style><div class=\"kb-row-layout-wrap kb-row-layout-id25338_604060-74 alignfull kt-row-has-bg wp-block-kadence-rowlayout\"><div class=\"kt-row-layout-overlay kt-row-overlay-gradient\"><\/div><div class=\"kt-row-column-wrap kt-has-1-columns kt-row-layout-equal kt-tab-layout-inherit kt-mobile-layout-row kt-row-valign-top kt-inner-column-height-full kb-theme-content-width\">\n<style>.kadence-column25338_0ccc2e-6b > .kt-inside-inner-col{display:flex;}.kadence-column25338_0ccc2e-6b > .kt-inside-inner-col{padding-right:0px;padding-left:0px;}.kadence-column25338_0ccc2e-6b > .kt-inside-inner-col,.kadence-column25338_0ccc2e-6b > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column25338_0ccc2e-6b > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column25338_0ccc2e-6b > .kt-inside-inner-col{flex-direction:column;justify-content:center;}.kadence-column25338_0ccc2e-6b > .kt-inside-inner-col > .aligncenter{width:100%;}.kt-row-column-wrap > .kadence-column25338_0ccc2e-6b{align-self:center;}.kt-inner-column-height-full:not(.kt-has-1-columns) > .wp-block-kadence-column.kadence-column25338_0ccc2e-6b{align-self:auto;}.kt-inner-column-height-full:not(.kt-has-1-columns) > .wp-block-kadence-column.kadence-column25338_0ccc2e-6b > .kt-inside-inner-col{flex-direction:column;justify-content:center;}.kadence-column25338_0ccc2e-6b > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column25338_0ccc2e-6b{position:relative;}@media all and (max-width: 1024px){.kt-row-column-wrap > .kadence-column25338_0ccc2e-6b{align-self:center;}}@media all and (max-width: 1024px){.kt-inner-column-height-full:not(.kt-has-1-columns) > .wp-block-kadence-column.kadence-column25338_0ccc2e-6b{align-self:auto;}}@media all and (max-width: 1024px){.kt-inner-column-height-full:not(.kt-has-1-columns) > .wp-block-kadence-column.kadence-column25338_0ccc2e-6b > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 1024px){.kadence-column25338_0ccc2e-6b > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kt-row-column-wrap > .kadence-column25338_0ccc2e-6b{align-self:center;}.kt-inner-column-height-full:not(.kt-has-1-columns) > .wp-block-kadence-column.kadence-column25338_0ccc2e-6b{align-self:auto;}.kt-inner-column-height-full:not(.kt-has-1-columns) > .wp-block-kadence-column.kadence-column25338_0ccc2e-6b > .kt-inside-inner-col{flex-direction:column;justify-content:center;}.kadence-column25338_0ccc2e-6b > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column25338_0ccc2e-6b\"><div class=\"kt-inside-inner-col\"><style>.kadence-column25338_fa3956-62 > .kt-inside-inner-col{display:flex;}.kadence-column25338_fa3956-62 > .kt-inside-inner-col,.kadence-column25338_fa3956-62 > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column25338_fa3956-62 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column25338_fa3956-62 > .kt-inside-inner-col{flex-direction:column;align-items:flex-start;}.kadence-column25338_fa3956-62 > .kt-inside-inner-col > .kb-image-is-ratio-size{align-self:stretch;}.kadence-column25338_fa3956-62 > .kt-inside-inner-col > .wp-block-kadence-advancedgallery{align-self:stretch;}.kadence-column25338_fa3956-62 > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column25338_fa3956-62 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column25338_fa3956-62{position:relative;}@media all and (max-width: 1024px){.kadence-column25338_fa3956-62 > .kt-inside-inner-col{flex-direction:column;justify-content:center;align-items:flex-start;}}@media all and (max-width: 767px){.kadence-column25338_fa3956-62 > .kt-inside-inner-col{flex-direction:column;justify-content:center;align-items:flex-start;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column25338_fa3956-62\"><div class=\"kt-inside-inner-col\"><style>.wp-block-kadence-advancedheading.kt-adv-heading25338_cd4e7c-45, .wp-block-kadence-advancedheading.kt-adv-heading25338_cd4e7c-45[data-kb-block=\"kb-adv-heading25338_cd4e7c-45\"]{padding-top:6px;padding-right:14px;padding-bottom:6px;padding-left:14px;margin-bottom:18px;font-size:11px;font-weight:700;font-style:normal;font-family:Poppins;color:#ffffff;background-color:rgba(255,255,255,0.11);border-top:1px solid rgba(255,255,255,0.21);border-right:1px solid rgba(255,255,255,0.21);border-bottom:1px solid rgba(255,255,255,0.21);border-left:1px solid rgba(255,255,255,0.21);border-top-left-radius:24px;border-top-right-radius:24px;border-bottom-right-radius:24px;border-bottom-left-radius:24px;}.wp-block-kadence-advancedheading.kt-adv-heading25338_cd4e7c-45[data-kb-block=\"kb-adv-heading25338_cd4e7c-45\"]{display:flex;gap:0.25em;align-items:center;}.wp-block-kadence-advancedheading.kt-adv-heading25338_cd4e7c-45[data-kb-block=\"kb-adv-heading25338_cd4e7c-45\"] .kb-adv-heading-icon svg{width:1em;height:1em;}.wp-block-kadence-advancedheading.kt-adv-heading25338_cd4e7c-45[data-kb-block=\"kb-adv-heading25338_cd4e7c-45\"] .kb-adv-heading-icon{color:#ee0000;}.wp-block-kadence-advancedheading.kt-adv-heading25338_cd4e7c-45 mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading25338_cd4e7c-45[data-kb-block=\"kb-adv-heading25338_cd4e7c-45\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading25338_cd4e7c-45 img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading25338_cd4e7c-45[data-kb-block=\"kb-adv-heading25338_cd4e7c-45\"] img.kb-inline-image{width:150px;vertical-align:baseline;}@media all and (max-width: 1024px){.wp-block-kadence-advancedheading.kt-adv-heading25338_cd4e7c-45, .wp-block-kadence-advancedheading.kt-adv-heading25338_cd4e7c-45[data-kb-block=\"kb-adv-heading25338_cd4e7c-45\"]{border-top:1px solid rgba(255,255,255,0.21);border-right:1px solid rgba(255,255,255,0.21);border-bottom:1px solid rgba(255,255,255,0.21);border-left:1px solid rgba(255,255,255,0.21);}}@media all and (max-width: 767px){.wp-block-kadence-advancedheading.kt-adv-heading25338_cd4e7c-45, .wp-block-kadence-advancedheading.kt-adv-heading25338_cd4e7c-45[data-kb-block=\"kb-adv-heading25338_cd4e7c-45\"]{border-top:1px solid rgba(255,255,255,0.21);border-right:1px solid rgba(255,255,255,0.21);border-bottom:1px solid rgba(255,255,255,0.21);border-left:1px solid rgba(255,255,255,0.21);}}<\/style><p class=\"kt-adv-heading25338_cd4e7c-45 wp-block-kadence-advancedheading kt-adv-heading-has-icon\" data-kb-block=\"kb-adv-heading25338_cd4e7c-45\"><span class=\"kb-svg-icon-wrap kb-adv-heading-icon kb-svg-icon-kb-custom-24947 kb-adv-heading-icon-side-left\"><svg viewBox=\"0 0 192.30001 146\"  fill=\"currentColor\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"  aria-hidden=\"true\"><metadata id=\"metadata15\"\/><defs id=\"defs4\"><style id=\"style2\"\/><\/defs><path class=\"a737459c-e8c7-4afa-8008-f6cfd15ccda2\" d=\"m 128,84 c 12.5,0 30.6,-2.6 30.6,-17.5 a 19.53,19.53 0 0 0 -0.3,-3.4 L 150.9,30.7 C 149.2,23.6 147.7,20.3 135.2,14.1 125.5,9.1 104.4,1 98.1,1 92.2,1 90.5,8.5 83.6,8.5 76.9,8.5 72,2.9 65.7,2.9 c -6,0 -9.9,4.1 -12.9,12.5 0,0 -8.4,23.7 -9.5,27.2 a 6.15,6.15 0 0 0 -0.2,1.9 C 43,53.7 79.3,83.9 128,84 m 32.5,-11.4 c 1.7,8.2 1.7,9.1 1.7,10.1 0,14 -15.7,21.8 -36.4,21.8 C 79,104.5 38.1,77.1 38.1,59 a 18.35,18.35 0 0 1 1.5,-7.3 C 22.8,52.5 1,55.5 1,74.7 1,106.2 75.6,145 134.6,145 c 45.3,0 56.7,-20.5 56.7,-36.7 0,-12.7 -11,-27.1 -30.8,-35.7\" id=\"path8\"\/><path d=\"m 160.5,72.6 c 1.7,8.2 1.7,9.1 1.7,10.1 0,14 -15.7,21.8 -36.4,21.8 C 79,104.5 38.1,77.1 38.1,59 a 18.35,18.35 0 0 1 1.5,-7.3 l 3.7,-9.1 a 6.15,6.15 0 0 0 -0.2,1.9 c 0,9.2 36.3,39.4 84.9,39.4 12.5,0 30.6,-2.6 30.6,-17.5 A 19.53,19.53 0 0 0 158.3,63 Z\" id=\"path10\"\/><\/svg><\/span><span class=\"kb-adv-text-inner\">Red Hat Advanced Partner <\/span><\/p><\/div><\/div>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading25338_ef79da-36, .wp-block-kadence-advancedheading.kt-adv-heading25338_ef79da-36[data-kb-block=\"kb-adv-heading25338_ef79da-36\"]{margin-top:0px;margin-bottom:10px;text-align:left;font-size:27px;line-height:1.2;font-weight:500;font-style:normal;font-family:Poppins;letter-spacing:-0.5px;}.wp-block-kadence-advancedheading.kt-adv-heading25338_ef79da-36 mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading25338_ef79da-36[data-kb-block=\"kb-adv-heading25338_ef79da-36\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading25338_ef79da-36 img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading25338_ef79da-36[data-kb-block=\"kb-adv-heading25338_ef79da-36\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<p class=\"kt-adv-heading25338_ef79da-36 wp-block-kadence-advancedheading has-theme-palette-8-color has-text-color\" data-kb-block=\"kb-adv-heading25338_ef79da-36\">Nowelizacja ustawy o KSC wdra\u017ca dyrektyw\u0119 NIS2 <br>i <mark true=\"true\" class=\"kt-highlight\">dotyczy Twojej firmy<\/mark><\/p>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading25338_5c5eee-e1, .wp-block-kadence-advancedheading.kt-adv-heading25338_5c5eee-e1[data-kb-block=\"kb-adv-heading25338_5c5eee-e1\"]{max-width:640px;margin-bottom:26px;text-align:left;font-size:16px;line-height:1.6;font-weight:300;font-style:normal;font-family:Poppins;color:rgba(255,255,255,0.83);}.wp-block-kadence-advancedheading.kt-adv-heading25338_5c5eee-e1 mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading25338_5c5eee-e1[data-kb-block=\"kb-adv-heading25338_5c5eee-e1\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading25338_5c5eee-e1 img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading25338_5c5eee-e1[data-kb-block=\"kb-adv-heading25338_5c5eee-e1\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<p class=\"kt-adv-heading25338_5c5eee-e1 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading25338_5c5eee-e1\">Inteca przeprowadzi Ci\u0119 przez ca\u0142y proces - od klasyfikacji podmiotu, przez wdro\u017cenie techniczne, po przygotowanie do audytu. <\/p>\n\n\n<style>.wp-block-kadence-advancedbtn.kt-btns25338_0d45ed-2e, .site .entry-content .wp-block-kadence-advancedbtn.kt-btns25338_0d45ed-2e, .wp-block-kadence-advancedbtn.kb-btns25338_0d45ed-2e, .site .entry-content .wp-block-kadence-advancedbtn.kb-btns25338_0d45ed-2e{margin-bottom:30px;}.wp-block-kadence-advancedbtn.kb-btns25338_0d45ed-2e{gap:14px;justify-content:flex-start;align-items:center;}.kt-btns25338_0d45ed-2e .kt-button{font-weight:normal;font-style:normal;}.kt-btns25338_0d45ed-2e .kt-btn-wrap-0{margin-right:5px;}.wp-block-kadence-advancedbtn.kt-btns25338_0d45ed-2e .kt-btn-wrap-0 .kt-button{color:#555555;border-color:#555555;}.wp-block-kadence-advancedbtn.kt-btns25338_0d45ed-2e .kt-btn-wrap-0 .kt-button:hover, .wp-block-kadence-advancedbtn.kt-btns25338_0d45ed-2e .kt-btn-wrap-0 .kt-button:focus{color:#ffffff;border-color:#444444;}.wp-block-kadence-advancedbtn.kt-btns25338_0d45ed-2e .kt-btn-wrap-0 .kt-button::before{display:none;}.wp-block-kadence-advancedbtn.kt-btns25338_0d45ed-2e .kt-btn-wrap-0 .kt-button:hover, .wp-block-kadence-advancedbtn.kt-btns25338_0d45ed-2e .kt-btn-wrap-0 .kt-button:focus{background:#444444;}<\/style>\n<div class=\"wp-block-kadence-advancedbtn kb-buttons-wrap kb-btns25338_0d45ed-2e\"><style>ul.menu .wp-block-kadence-advancedbtn .kb-btn25338_1e10c3-af.kb-button{width:initial;}.wp-block-kadence-advancedbtn .kb-btn25338_1e10c3-af.kb-button{background:#3e7c93;font-size:15px;font-family:Poppins;font-weight:500;padding-top:14px;padding-right:26px;padding-bottom:14px;padding-left:26px;}.wp-block-kadence-advancedbtn .kb-btn25338_1e10c3-af.kb-button:hover, .wp-block-kadence-advancedbtn .kb-btn25338_1e10c3-af.kb-button:focus{background:#4a8fa3;}<\/style><a class=\"kb-button kt-button button kb-btn25338_1e10c3-af kt-btn-size-standard kt-btn-width-type-auto kb-btn-global-fill  kt-btn-has-text-true kt-btn-has-svg-true  wp-block-kadence-singlebtn\" href=\"\/pl\/ustawa-o-krajowym-systemie-cyberbezpieczenstwa\/\"><span class=\"kt-btn-inner-text\">Sprawd\u017a jak zapewniamy ca\u0142kowit\u0105 zgodno\u015b\u0107 z KSC<\/span><span class=\"kb-svg-icon-wrap kb-svg-icon-fe_arrowRight kt-btn-icon-side-right\"><svg viewBox=\"0 0 24 24\"  fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"  aria-hidden=\"true\"><line x1=\"5\" y1=\"12\" x2=\"19\" y2=\"12\"\/><polyline points=\"12 5 19 12 12 19\"\/><\/svg><\/span><\/a>\n\n<style>ul.menu .wp-block-kadence-advancedbtn .kb-btn25338_af60d8-da.kb-button{width:initial;}.wp-block-kadence-advancedbtn .kb-btn25338_af60d8-da.kb-button{background:#d35400;font-size:15px;font-family:Poppins;font-weight:500;padding-top:14px;padding-right:26px;padding-bottom:14px;padding-left:26px;}.wp-block-kadence-advancedbtn .kb-btn25338_af60d8-da.kb-button:hover, .wp-block-kadence-advancedbtn .kb-btn25338_af60d8-da.kb-button:focus{background:#b84700;}<\/style><a class=\"kb-button kt-button button kb-btn25338_af60d8-da kt-btn-size-standard kt-btn-width-type-auto kb-btn-global-fill  kt-btn-has-text-true kt-btn-has-svg-true  wp-block-kadence-singlebtn\" href=\"https:\/\/inteca.com\/pl\/kontakt\/?topic=Zgodno%C5%9B%C4%87%20z%20KSC%20i%20NIS2\"><span class=\"kt-btn-inner-text\">Um\u00f3w bezp\u0142atn\u0105 konsultacj\u0119<\/span><span class=\"kb-svg-icon-wrap kb-svg-icon-fe_arrowRight kt-btn-icon-side-right\"><svg viewBox=\"0 0 24 24\"  fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"  aria-hidden=\"true\"><line x1=\"5\" y1=\"12\" x2=\"19\" y2=\"12\"\/><polyline points=\"12 5 19 12 12 19\"\/><\/svg><\/span><\/a><\/div>\n\n\n<style>.kadence-column25338_a0c4fc-26 > .kt-inside-inner-col,.kadence-column25338_a0c4fc-26 > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column25338_a0c4fc-26 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column25338_a0c4fc-26 > .kt-inside-inner-col{flex-direction:column;}.kadence-column25338_a0c4fc-26 > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column25338_a0c4fc-26 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column25338_a0c4fc-26{position:relative;}@media all and (max-width: 1024px){.kadence-column25338_a0c4fc-26 > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column25338_a0c4fc-26 > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column25338_a0c4fc-26\"><div class=\"kt-inside-inner-col\"><style>.kb-row-layout-id25338_9a4aa2-e5 > .kt-row-column-wrap{align-content:start;}:where(.kb-row-layout-id25338_9a4aa2-e5 > .kt-row-column-wrap) > .wp-block-kadence-column{justify-content:start;}.kb-row-layout-id25338_9a4aa2-e5 > .kt-row-column-wrap{column-gap:26px;row-gap:var(--global-kb-gap-md, 2rem);grid-template-columns:minmax(0, calc(28.3% - ((26px * 1 )\/2)))minmax(0, calc(71.7% - ((26px * 1 )\/2)));}.kb-row-layout-id25338_9a4aa2-e5 > .kt-row-layout-overlay{opacity:0.30;}@media all and (max-width: 1024px){.kb-row-layout-id25338_9a4aa2-e5 > .kt-row-column-wrap{grid-template-columns:repeat(2, minmax(0, 1fr));}}@media all and (max-width: 767px){.kb-row-layout-id25338_9a4aa2-e5 > .kt-row-column-wrap{grid-template-columns:minmax(0, 1fr);}}<\/style><div class=\"kb-row-layout-wrap kb-row-layout-id25338_9a4aa2-e5 alignnone wp-block-kadence-rowlayout\"><div class=\"kt-row-column-wrap kt-has-2-columns kt-row-layout-equal kt-tab-layout-inherit kt-mobile-layout-row kt-row-valign-top kt-inner-column-height-full\">\n<style>.kadence-column25338_d9c6da-9b > .kt-inside-inner-col{display:flex;}.kadence-column25338_d9c6da-9b > .kt-inside-inner-col,.kadence-column25338_d9c6da-9b > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column25338_d9c6da-9b > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column25338_d9c6da-9b > .kt-inside-inner-col{flex-direction:column;justify-content:center;}.kadence-column25338_d9c6da-9b > .kt-inside-inner-col > .aligncenter{width:100%;}.kt-row-column-wrap > .kadence-column25338_d9c6da-9b{align-self:center;}.kt-inner-column-height-full:not(.kt-has-1-columns) > .wp-block-kadence-column.kadence-column25338_d9c6da-9b{align-self:auto;}.kt-inner-column-height-full:not(.kt-has-1-columns) > .wp-block-kadence-column.kadence-column25338_d9c6da-9b > .kt-inside-inner-col{flex-direction:column;justify-content:center;}.kadence-column25338_d9c6da-9b > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column25338_d9c6da-9b{position:relative;}@media all and (max-width: 1024px){.kt-row-column-wrap > .kadence-column25338_d9c6da-9b{align-self:center;}}@media all and (max-width: 1024px){.kt-inner-column-height-full:not(.kt-has-1-columns) > .wp-block-kadence-column.kadence-column25338_d9c6da-9b{align-self:auto;}}@media all and (max-width: 1024px){.kt-inner-column-height-full:not(.kt-has-1-columns) > .wp-block-kadence-column.kadence-column25338_d9c6da-9b > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 1024px){.kadence-column25338_d9c6da-9b > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kt-row-column-wrap > .kadence-column25338_d9c6da-9b{align-self:center;}.kt-inner-column-height-full:not(.kt-has-1-columns) > .wp-block-kadence-column.kadence-column25338_d9c6da-9b{align-self:auto;}.kt-inner-column-height-full:not(.kt-has-1-columns) > .wp-block-kadence-column.kadence-column25338_d9c6da-9b > .kt-inside-inner-col{flex-direction:column;justify-content:center;}.kadence-column25338_d9c6da-9b > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column25338_d9c6da-9b\"><div class=\"kt-inside-inner-col\"><style>.wp-block-kadence-advancedheading.kt-adv-heading20334_e738ee-6b_0, .wp-block-kadence-advancedheading.kt-adv-heading20334_e738ee-6b_0[data-kb-block=\"kb-adv-heading20334_e738ee-6b_0\"]{font-size:11px;line-height:1.5;font-weight:500;font-style:normal;font-family:Poppins;text-transform:uppercase;color:rgba(255,255,255,0.56);}.wp-block-kadence-advancedheading.kt-adv-heading20334_e738ee-6b_0 mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading20334_e738ee-6b_0[data-kb-block=\"kb-adv-heading20334_e738ee-6b_0\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading20334_e738ee-6b_0 img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading20334_e738ee-6b_0[data-kb-block=\"kb-adv-heading20334_e738ee-6b_0\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<p class=\"kt-adv-heading20334_e738ee-6b_0 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading20334_e738ee-6b_0\">Zaufa\u0142y nam wiod\u0105ce przedsi\u0119biorstwa<\/p>\n<\/div><\/div>\n\n\n<style>.kadence-column25338_ea3929-b9 > .kt-inside-inner-col,.kadence-column25338_ea3929-b9 > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column25338_ea3929-b9 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column25338_ea3929-b9 > .kt-inside-inner-col{flex-direction:column;}.kadence-column25338_ea3929-b9 > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column25338_ea3929-b9 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column25338_ea3929-b9{position:relative;}@media all and (max-width: 1024px){.kadence-column25338_ea3929-b9 > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column25338_ea3929-b9 > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column25338_ea3929-b9\"><div class=\"kt-inside-inner-col\"><style>.wp-block-kadence-advancedgallery .kb-gallery-type-grid.kb-gallery-id-25338_846fd9-ac{margin:-0px;}.kb-gallery-type-grid.kb-gallery-id-25338_846fd9-ac .kadence-blocks-gallery-item{padding:0px;}.kb-gallery-id-25338_846fd9-ac .kadence-blocks-gallery-item .kb-gal-image-radius, .kb-gallery-id-25338_846fd9-ac .kb-slide-item .kb-gal-image-radius img{border-radius:0px 0px 0px 0px;;}<\/style><div class=\"kb-gallery-wrap-id-25338_846fd9-ac alignnone wp-block-kadence-advancedgallery\"><ul class=\"kb-gallery-ul kb-gallery-non-static kb-gallery-type-grid kb-gallery-id-25338_846fd9-ac kb-gallery-caption-style-bottom-hover kb-gallery-filter-none\" data-image-filter=\"none\" data-item-selector=\".kadence-blocks-gallery-item\" data-lightbox-caption=\"true\" data-columns-xxl=\"5\" data-columns-xl=\"5\" data-columns-md=\"5\" data-columns-sm=\"4\" data-columns-xs=\"4\" data-columns-ss=\"3\"><li class=\"kadence-blocks-gallery-item\" tabindex=\"0\"><div class=\"kadence-blocks-gallery-item-inner\"><figure class=\"kb-gallery-figure kadence-blocks-gallery-item-hide-caption\"><div class=\"kb-gal-image-radius\" style=\"max-width:300px;\"><div class=\"kb-gallery-image-contain kadence-blocks-gallery-intrinsic kb-gallery-image-ratio-inherit kb-has-image-ratio-inherit\" style=\"padding-bottom:50%;\"><img decoding=\"async\" src=\"https:\/\/inteca.com\/wp-content\/uploads\/2023\/05\/2-6-300x150-1.webp\" width=\"300\" height=\"150\" alt=\"\" data-full-image=\"https:\/\/inteca.com\/wp-content\/uploads\/2023\/05\/2-6-300x150-1.webp\" data-light-image=\"https:\/\/inteca.com\/wp-content\/uploads\/2023\/05\/2-6-300x150-1.webp\" data-id=\"11745\" class=\"wp-image-11745\"\/><\/div><\/div><\/figure><\/div><\/li><li class=\"kadence-blocks-gallery-item\" tabindex=\"0\"><div class=\"kadence-blocks-gallery-item-inner\"><figure class=\"kb-gallery-figure kadence-blocks-gallery-item-hide-caption\"><div class=\"kb-gal-image-radius\" style=\"max-width:300px;\"><div class=\"kb-gallery-image-contain kadence-blocks-gallery-intrinsic kb-gallery-image-ratio-inherit kb-has-image-ratio-inherit\" style=\"padding-bottom:50%;\"><img decoding=\"async\" src=\"https:\/\/inteca.com\/wp-content\/uploads\/2023\/05\/1-6-300x150-1.webp\" width=\"300\" height=\"150\" alt=\"\" data-full-image=\"https:\/\/inteca.com\/wp-content\/uploads\/2023\/05\/1-6-300x150-1.webp\" data-light-image=\"https:\/\/inteca.com\/wp-content\/uploads\/2023\/05\/1-6-300x150-1.webp\" data-id=\"11703\" class=\"wp-image-11703\"\/><\/div><\/div><\/figure><\/div><\/li><li class=\"kadence-blocks-gallery-item\" tabindex=\"0\"><div class=\"kadence-blocks-gallery-item-inner\"><figure class=\"kb-gallery-figure kadence-blocks-gallery-item-hide-caption\"><div class=\"kb-gal-image-radius\" style=\"max-width:300px;\"><div class=\"kb-gallery-image-contain kadence-blocks-gallery-intrinsic kb-gallery-image-ratio-inherit kb-has-image-ratio-inherit\" style=\"padding-bottom:50%;\"><img decoding=\"async\" src=\"https:\/\/inteca.com\/wp-content\/uploads\/2023\/05\/26-300x150-1.webp\" width=\"300\" height=\"150\" alt=\"\" data-full-image=\"https:\/\/inteca.com\/wp-content\/uploads\/2023\/05\/26-300x150-1.webp\" data-light-image=\"https:\/\/inteca.com\/wp-content\/uploads\/2023\/05\/26-300x150-1.webp\" data-id=\"11741\" class=\"wp-image-11741\"\/><\/div><\/div><\/figure><\/div><\/li><li class=\"kadence-blocks-gallery-item\" tabindex=\"0\"><div class=\"kadence-blocks-gallery-item-inner\"><figure class=\"kb-gallery-figure kadence-blocks-gallery-item-hide-caption\"><div class=\"kb-gal-image-radius\" style=\"max-width:300px;\"><div class=\"kb-gallery-image-contain kadence-blocks-gallery-intrinsic kb-gallery-image-ratio-inherit kb-has-image-ratio-inherit\" style=\"padding-bottom:50%;\"><img decoding=\"async\" src=\"https:\/\/inteca.com\/wp-content\/uploads\/2023\/05\/9-3-300x150-1.webp\" width=\"300\" height=\"150\" alt=\"\" data-full-image=\"https:\/\/inteca.com\/wp-content\/uploads\/2023\/05\/9-3-300x150-1.webp\" data-light-image=\"https:\/\/inteca.com\/wp-content\/uploads\/2023\/05\/9-3-300x150-1.webp\" data-id=\"11709\" class=\"wp-image-11709\"\/><\/div><\/div><\/figure><\/div><\/li><li class=\"kadence-blocks-gallery-item\" tabindex=\"0\"><div class=\"kadence-blocks-gallery-item-inner\"><figure class=\"kb-gallery-figure kadence-blocks-gallery-item-hide-caption\"><div class=\"kb-gal-image-radius\" style=\"max-width:300px;\"><div class=\"kb-gallery-image-contain kadence-blocks-gallery-intrinsic kb-gallery-image-ratio-inherit kb-has-image-ratio-inherit\" style=\"padding-bottom:50%;\"><img decoding=\"async\" src=\"https:\/\/inteca.com\/wp-content\/uploads\/2023\/05\/3-6-300x150-1.webp\" width=\"300\" height=\"150\" alt=\"\" data-full-image=\"https:\/\/inteca.com\/wp-content\/uploads\/2023\/05\/3-6-300x150-1.webp\" data-light-image=\"https:\/\/inteca.com\/wp-content\/uploads\/2023\/05\/3-6-300x150-1.webp\" data-id=\"11749\" class=\"wp-image-11749\"\/><\/div><\/div><\/figure><\/div><\/li><\/ul><\/div><\/div><\/div>\n\n<\/div><\/div><\/div><\/div>\n<\/div><\/div>\n\n<\/div><\/div><\/div><\/div>\n<\/div><\/div>\n\n\n<style>.kb-row-layout-id25338_a01774-09 > .kt-row-column-wrap{align-content:start;}:where(.kb-row-layout-id25338_a01774-09 > .kt-row-column-wrap) > .wp-block-kadence-column{justify-content:start;}.kb-row-layout-id25338_a01774-09 > .kt-row-column-wrap{column-gap:var(--global-kb-gap-md, 2rem);row-gap:var(--global-kb-gap-md, 2rem);max-width:var( --global-content-width, 1350px );padding-left:var(--global-content-edge-padding);padding-right:var(--global-content-edge-padding);padding-top:var(--global-kb-spacing-sm, 1.5rem);padding-right:var(--global-kb-spacing-5xl, 10rem);padding-bottom:var(--global-kb-spacing-xxl, 5rem);grid-template-columns:minmax(0, 1fr);}.kb-row-layout-id25338_a01774-09 > .kt-row-layout-overlay{opacity:0.30;}@media all and (max-width: 1024px){.kb-row-layout-id25338_a01774-09 > .kt-row-column-wrap{grid-template-columns:minmax(0, 1fr);}}@media all and (max-width: 767px){.kb-row-layout-id25338_a01774-09 > .kt-row-column-wrap{grid-template-columns:minmax(0, 1fr);}}<\/style><div class=\"kb-row-layout-wrap kb-row-layout-id25338_a01774-09 alignnone wp-block-kadence-rowlayout\"><div class=\"kt-row-column-wrap kt-has-1-columns kt-row-layout-equal kt-tab-layout-inherit kt-mobile-layout-row kt-row-valign-top kb-theme-content-width\">\n<style>.kadence-column25338_62d349-d5 > .kt-inside-inner-col,.kadence-column25338_62d349-d5 > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column25338_62d349-d5 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column25338_62d349-d5 > .kt-inside-inner-col{flex-direction:column;}.kadence-column25338_62d349-d5 > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column25338_62d349-d5 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column25338_62d349-d5{position:relative;}@media all and (max-width: 1024px){.kadence-column25338_62d349-d5 > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column25338_62d349-d5 > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column25338_62d349-d5\"><div class=\"kt-inside-inner-col\"><style>.wp-block-kadence-advancedheading.kt-adv-heading25338_aa2da5-44, .wp-block-kadence-advancedheading.kt-adv-heading25338_aa2da5-44[data-kb-block=\"kb-adv-heading25338_aa2da5-44\"]{padding-bottom:var(--global-kb-spacing-sm, 1.5rem);font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading25338_aa2da5-44 mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading25338_aa2da5-44[data-kb-block=\"kb-adv-heading25338_aa2da5-44\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading25338_aa2da5-44 img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading25338_aa2da5-44[data-kb-block=\"kb-adv-heading25338_aa2da5-44\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 class=\"kt-adv-heading25338_aa2da5-44 wp-block-kadence-advancedheading\" data-kb-block=\"kb-adv-heading25338_aa2da5-44\">Dowiedz si\u0119 wi\u0119cej o nowelizacji ustawy KSC<\/h2>\n\n\n<style>.kt-post-loop25338_819498-7b .kadence-post-image{padding-top:0px;padding-right:30px;padding-bottom:10px;padding-left:0px;}.kt-post-loop25338_819498-7b .kt-feat-image-align-left{grid-template-columns:25% auto;}.kadence-post-image img{border-top-left-radius:20px;border-top-right-radius:20px;border-bottom-right-radius:20px;border-bottom-left-radius:20px;}.kt-post-loop25338_819498-7b .kt-post-grid-wrap{gap:30px 30px;}.kt-post-loop25338_819498-7b .kt-blocks-post-grid-item{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;overflow:hidden;}.kt-post-loop25338_819498-7b .kt-blocks-post-grid-item .kt-blocks-post-grid-item-inner{padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.kt-post-loop25338_819498-7b .kt-blocks-post-grid-item header{padding-top:0px;padding-right:0px;padding-bottom:10px;padding-left:0px;margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;}.kt-post-loop25338_819498-7b .kt-blocks-post-grid-item .kt-blocks-above-categories{font-size:13px;line-height:20px;text-transform:uppercase;}.kt-post-loop25338_819498-7b .kt-blocks-post-grid-item .entry-title{padding-top:5px;padding-right:0px;padding-bottom:0px;padding-left:0px;margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font-size:24px;line-height:30px;}.kt-post-loop25338_819498-7b .entry-content{padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font-size:14px;line-height:24px;}.kt-post-loop25338_819498-7b .kt-blocks-post-footer{border-top-width:0px;border-right-width:0px;border-bottom-width:0px;border-left-width:0px;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font-size:12px;line-height:20px;text-transform:uppercase;}.kt-post-loop25338_819498-7b .entry-content:after{height:0px;}.kt-post-loop25338_819498-7b .kb-filter-item{border-top-width:0px;border-right-width:0px;border-bottom-width:2px;border-left-width:0px;padding-top:5px;padding-right:8px;padding-bottom:5px;padding-left:8px;margin-top:0px;margin-right:10px;margin-bottom:0px;margin-left:0px;}<\/style><div class=\"wp-block-kadence-postgrid kt-blocks-post-loop-block alignnone kt-post-loop25338_819498-7b kt-post-grid-layout-grid \"><div class=\"kt-post-grid-layout-grid-wrap kt-post-grid-wrap\" data-columns-xxl=\"1\" data-columns-xl=\"1\" data-columns-md=\"1\" data-columns-sm=\"1\" data-columns-xs=\"1\" data-columns-ss=\"1\"data-item-selector=\".kt-post-masonry-item\" aria-label=\"Post Carousel\"><article class=\"kt-blocks-post-grid-item post-25487 business-insights type-business-insights status-publish format-standard has-post-thumbnail hentry category-zarzadzanie-dostepem-do-tozsamosci tag-kontrola-dostepu-pl tag-mfa tag-nis2 tag-ustawa-ksc\"><div class=\"kt-blocks-post-grid-item-inner-wrap kt-feat-image-align-left kt-feat-image-mobile-align-top\"><div class=\"kadence-post-image\"><div class=\"kadence-post-image-intrisic kt-image-ratio-56-25\" style=\"padding-bottom:56.25%;\"><div class=\"kadence-post-image-inner-intrisic\"><a aria-hidden=\"true\" tabindex=\"-1\" role=\"presentation\" href=\"https:\/\/inteca.com\/pl\/insighty-biznesowe\/iam-a-nis2\/\" aria-label=\"IAM a NIS2: jak zaprojektowa\u0107 zarz\u0105dzanie to\u017csamo\u015bci\u0105 zgodne z NIS2?\" class=\"kadence-post-image-inner-wrap\"><img decoding=\"async\" width=\"1000\" height=\"523\" src=\"https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Zarzadzanie-tozsamoscia-zgodne-z-NIS2.png\" class=\"attachment-large size-large wp-post-image\" alt=\"Informational banner about NIS2-compliant identity management with Inteca logo and a pile of documents on the right.\" srcset=\"https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Zarzadzanie-tozsamoscia-zgodne-z-NIS2.png 1000w, https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Zarzadzanie-tozsamoscia-zgodne-z-NIS2-300x157.png 300w, https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Zarzadzanie-tozsamoscia-zgodne-z-NIS2-768x402.png 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/><\/a><\/div><\/div><\/div><div class=\"kt-blocks-post-grid-item-inner\"><header><h2 class=\"entry-title\"><a href=\"https:\/\/inteca.com\/pl\/insighty-biznesowe\/iam-a-nis2\/\">IAM a NIS2: jak zaprojektowa\u0107 zarz\u0105dzanie to\u017csamo\u015bci\u0105 zgodne z NIS2?<\/a><\/h2><div class=\"kt-blocks-post-top-meta\"><div class=\"kt-blocks-date\"><span class=\"kt-blocks-date-pretext\">Posted on <\/span><time datetime=\"2026-04-16T15:49:43+02:00\" class=\"kt-blocks-post-date\">2026-04-16<\/time><\/div><\/div><\/header><div class=\"entry-content\"><\/div><footer class=\"kt-blocks-post-footer\"><div class=\"kt-blocks-post-footer-left\"><\/div><div class=\"kt-blocks-post-footer-right\"><\/div><\/footer><\/div><\/div><\/article><article class=\"kt-blocks-post-grid-item post-25348 business-insights type-business-insights status-publish format-standard has-post-thumbnail hentry category-zarzadzanie-dostepem-do-tozsamosci tag-nis2 tag-ustawa-ksc\"><div class=\"kt-blocks-post-grid-item-inner-wrap kt-feat-image-align-left kt-feat-image-mobile-align-top\"><div class=\"kadence-post-image\"><div class=\"kadence-post-image-intrisic kt-image-ratio-56-25\" style=\"padding-bottom:56.25%;\"><div class=\"kadence-post-image-inner-intrisic\"><a aria-hidden=\"true\" tabindex=\"-1\" role=\"presentation\" href=\"https:\/\/inteca.com\/pl\/insighty-biznesowe\/kogo-dotyczy-ksc\/\" aria-label=\"Krajowy System Cyberbezpiecze\u0144stwa \u2013 kogo dotyczy KSC i co trzeba wdro\u017cy\u0107?\" class=\"kadence-post-image-inner-wrap\"><img decoding=\"async\" width=\"1000\" height=\"523\" src=\"https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Kogo-dotyczy-KSC.png\" class=\"attachment-large size-large wp-post-image\" alt=\"\" srcset=\"https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Kogo-dotyczy-KSC.png 1000w, https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Kogo-dotyczy-KSC-300x157.png 300w, https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Kogo-dotyczy-KSC-768x402.png 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/><\/a><\/div><\/div><\/div><div class=\"kt-blocks-post-grid-item-inner\"><header><h2 class=\"entry-title\"><a href=\"https:\/\/inteca.com\/pl\/insighty-biznesowe\/kogo-dotyczy-ksc\/\">Krajowy System Cyberbezpiecze\u0144stwa \u2013 kogo dotyczy KSC i co trzeba wdro\u017cy\u0107?<\/a><\/h2><div class=\"kt-blocks-post-top-meta\"><div class=\"kt-blocks-date\"><span class=\"kt-blocks-date-pretext\">Posted on <\/span><time datetime=\"2026-04-09T15:31:56+02:00\" class=\"kt-blocks-post-date\">2026-04-09<\/time><\/div><\/div><\/header><div class=\"entry-content\"><\/div><footer class=\"kt-blocks-post-footer\"><div class=\"kt-blocks-post-footer-left\"><\/div><div class=\"kt-blocks-post-footer-right\"><\/div><\/footer><\/div><\/div><\/article><article class=\"kt-blocks-post-grid-item post-25338 business-insights type-business-insights status-publish format-standard has-post-thumbnail hentry category-zarzadzanie-dostepem-do-tozsamosci tag-nis2 tag-ustawa-ksc\"><div class=\"kt-blocks-post-grid-item-inner-wrap kt-feat-image-align-left kt-feat-image-mobile-align-top\"><div class=\"kadence-post-image\"><div class=\"kadence-post-image-intrisic kt-image-ratio-56-25\" style=\"padding-bottom:56.25%;\"><div class=\"kadence-post-image-inner-intrisic\"><a aria-hidden=\"true\" tabindex=\"-1\" role=\"presentation\" href=\"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/\" aria-label=\"Analiza ryzyka w cyberbezpiecze\u0144stwie &#8211; metody i wymagania KSC \/ NIS2\" class=\"kadence-post-image-inner-wrap\"><img decoding=\"async\" width=\"1000\" height=\"523\" src=\"https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Analiza-ryzyka-w-cyberbezpieczenstwie.png\" class=\"attachment-large size-large wp-post-image\" alt=\"\" srcset=\"https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Analiza-ryzyka-w-cyberbezpieczenstwie.png 1000w, https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Analiza-ryzyka-w-cyberbezpieczenstwie-300x157.png 300w, https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Analiza-ryzyka-w-cyberbezpieczenstwie-768x402.png 768w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/><\/a><\/div><\/div><\/div><div class=\"kt-blocks-post-grid-item-inner\"><header><h2 class=\"entry-title\"><a href=\"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/\">Analiza ryzyka w cyberbezpiecze\u0144stwie &#8211; metody i wymagania KSC \/ NIS2<\/a><\/h2><div class=\"kt-blocks-post-top-meta\"><div class=\"kt-blocks-date\"><span class=\"kt-blocks-date-pretext\">Posted on <\/span><time datetime=\"2026-04-08T16:19:48+02:00\" class=\"kt-blocks-post-date\">2026-04-08<\/time><\/div><\/div><\/header><div class=\"entry-content\"><\/div><footer class=\"kt-blocks-post-footer\"><div class=\"kt-blocks-post-footer-left\"><\/div><div class=\"kt-blocks-post-footer-right\"><\/div><\/footer><\/div><\/div><\/article><\/div><\/div><!-- .wp-block-kadence-postgrid --><\/div><\/div>\n\n<\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>Kr\u00f3tka odpowied\u017a Analiza ryzyka w cyberbezpiecze\u0144stwie to proces identyfikacji zagro\u017ce\u0144, oceny podatno\u015bci i oszacowania wp\u0142ywu incydentu na \u015bwiadczenie us\u0142ugi. W ustawie o krajowym systemie cyberbezpiecze\u0144stwa i w dyrektywie NIS2 analiza ryzyka nie jest osobnym dokumentem przygotowywanym \u201ena audyt\u201d. Jest mechanizmem, kt\u00f3ry steruje doborem \u015brodk\u00f3w technicznych, organizacyjnych, dokumentacyjnych i kontraktowych w ramach systemu zarz\u0105dzania bezpiecze\u0144stwem informacji&#8230;<\/p>\n","protected":false},"author":21,"featured_media":25340,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":{"_acf_changed":false,"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","_kadence_starter_templates_imported_post":false,"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"categories":[336],"tags":[399,398],"class_list":["post-25338","business-insights","type-business-insights","status-publish","format-standard","has-post-thumbnail","hentry","category-zarzadzanie-dostepem-do-tozsamosci","tag-nis2","tag-ustawa-ksc"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"Jak prowadzi\u0107 analiz\u0119 ryzyka zgodn\u0105 z KSC i NIS2: metody ISO\/IEC 27005 i NIST SP 800-30, zasada proporcjonalno\u015bci \u015brodk\u00f3w oraz miejsce ryzyka w SZBI.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Aleksandra Malesa\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"pl_PL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Inteca \u00bb IT&#039;s about business\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Analiza ryzyka w cyberbezpiecze\u0144stwie \u2013 KSC i NIS2\" \/>\n\t\t<meta property=\"og:description\" content=\"Jak prowadzi\u0107 analiz\u0119 ryzyka zgodn\u0105 z KSC i NIS2: metody ISO\/IEC 27005 i NIST SP 800-30, zasada proporcjonalno\u015bci \u015brodk\u00f3w oraz miejsce ryzyka w SZBI.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Analiza-ryzyka-w-cyberbezpieczenstwie.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Analiza-ryzyka-w-cyberbezpieczenstwie.png\" \/>\n\t\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t\t<meta property=\"og:image:height\" content=\"523\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-04-08T14:19:48+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-09-17T13:30:06+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Analiza ryzyka w cyberbezpiecze\u0144stwie \u2013 KSC i NIS2\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Jak prowadzi\u0107 analiz\u0119 ryzyka zgodn\u0105 z KSC i NIS2: metody ISO\/IEC 27005 i NIST SP 800-30, zasada proporcjonalno\u015bci \u015brodk\u00f3w oraz miejsce ryzyka w SZBI.\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Analiza-ryzyka-w-cyberbezpieczenstwie.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/insighty-biznesowe\\\/analiza-ryzyka-w-cyberbezpieczenstwie\\\/#blogposting\",\"name\":\"Analiza ryzyka w cyberbezpiecze\\u0144stwie \\u2013 KSC i NIS2\",\"headline\":\"Analiza ryzyka w cyberbezpiecze\\u0144stwie &#8211; metody i wymagania KSC \\\/ NIS2\",\"author\":{\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/blog\\\/author\\\/aleksandramalesaa\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/inteca.com\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/Analiza-ryzyka-w-cyberbezpieczenstwie.png\",\"width\":1000,\"height\":523},\"datePublished\":\"2026-04-08T16:19:48+02:00\",\"dateModified\":\"2026-09-17T15:30:06+02:00\",\"inLanguage\":\"pl-PL\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/insighty-biznesowe\\\/analiza-ryzyka-w-cyberbezpieczenstwie\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/insighty-biznesowe\\\/analiza-ryzyka-w-cyberbezpieczenstwie\\\/#webpage\"},\"articleSection\":\"Zarz\\u0105dzanie dost\\u0119pem do to\\u017csamo\\u015bci, NIS2, Ustawa KSC\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/insighty-biznesowe\\\/analiza-ryzyka-w-cyberbezpieczenstwie\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/#listItem\",\"position\":1,\"name\":\"Inteca\",\"item\":\"https:\\\/\\\/inteca.com\\\/pl\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/insighty-biznesowe\\\/#listItem\",\"name\":\"Business insights\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/insighty-biznesowe\\\/#listItem\",\"position\":2,\"name\":\"Business insights\",\"item\":\"https:\\\/\\\/inteca.com\\\/pl\\\/insighty-biznesowe\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/blog\\\/category\\\/zarzadzanie-dostepem-do-tozsamosci\\\/#listItem\",\"name\":\"Zarz\\u0105dzanie dost\\u0119pem do to\\u017csamo\\u015bci\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/#listItem\",\"name\":\"Inteca\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/blog\\\/category\\\/zarzadzanie-dostepem-do-tozsamosci\\\/#listItem\",\"position\":3,\"name\":\"Zarz\\u0105dzanie dost\\u0119pem do to\\u017csamo\\u015bci\",\"item\":\"https:\\\/\\\/inteca.com\\\/pl\\\/blog\\\/category\\\/zarzadzanie-dostepem-do-tozsamosci\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/insighty-biznesowe\\\/analiza-ryzyka-w-cyberbezpieczenstwie\\\/#listItem\",\"name\":\"Analiza ryzyka w cyberbezpiecze\\u0144stwie &#8211; metody i wymagania KSC \\\/ NIS2\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/insighty-biznesowe\\\/#listItem\",\"name\":\"Business insights\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/insighty-biznesowe\\\/analiza-ryzyka-w-cyberbezpieczenstwie\\\/#listItem\",\"position\":4,\"name\":\"Analiza ryzyka w cyberbezpiecze\\u0144stwie &#8211; metody i wymagania KSC \\\/ NIS2\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/blog\\\/category\\\/zarzadzanie-dostepem-do-tozsamosci\\\/#listItem\",\"name\":\"Zarz\\u0105dzanie dost\\u0119pem do to\\u017csamo\\u015bci\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/#organization\",\"name\":\"Inteca Sp. z o.o.\",\"description\":\"Inteca is a specialized enterprise platform provider and Red Hat Advanced Partner. We design, implement, and operate mission-critical platforms based on Keycloak, Kafka, OpenShift, and Nuxeo enhanced with AI automation. We work in banking, insurance, and government sectors across the EU and the US.\",\"url\":\"https:\\\/\\\/inteca.com\\\/pl\\\/\",\"email\":\"contact@inteca.com\",\"telephone\":\"+48717156091\",\"foundingDate\":\"2011-04-01\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"value\":50},\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/inteca.com\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/Inteca_logo_pion_tagline_JasneTlo.png\",\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/insighty-biznesowe\\\/analiza-ryzyka-w-cyberbezpieczenstwie\\\/#organizationLogo\",\"width\":288,\"height\":344},\"image\":{\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/insighty-biznesowe\\\/analiza-ryzyka-w-cyberbezpieczenstwie\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/www.youtube.com\\\/@IntecaPl\",\"https:\\\/\\\/pl.linkedin.com\\\/company\\\/inteca\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/blog\\\/author\\\/aleksandramalesaa\\\/#author\",\"url\":\"https:\\\/\\\/inteca.com\\\/pl\\\/blog\\\/author\\\/aleksandramalesaa\\\/\",\"name\":\"Aleksandra Malesa\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/insighty-biznesowe\\\/analiza-ryzyka-w-cyberbezpieczenstwie\\\/#authorImage\",\"url\":\"https:\\\/\\\/inteca.com\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/Aleksandra.jpg\",\"width\":560,\"height\":560},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/aleksandramalesa\\\/\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/insighty-biznesowe\\\/analiza-ryzyka-w-cyberbezpieczenstwie\\\/#webpage\",\"url\":\"https:\\\/\\\/inteca.com\\\/pl\\\/insighty-biznesowe\\\/analiza-ryzyka-w-cyberbezpieczenstwie\\\/\",\"name\":\"Analiza ryzyka w cyberbezpiecze\\u0144stwie \\u2013 KSC i NIS2\",\"description\":\"Jak prowadzi\\u0107 analiz\\u0119 ryzyka zgodn\\u0105 z KSC i NIS2: metody ISO\\\/IEC 27005 i NIST SP 800-30, zasada proporcjonalno\\u015bci \\u015brodk\\u00f3w oraz miejsce ryzyka w SZBI.\",\"inLanguage\":\"pl-PL\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/insighty-biznesowe\\\/analiza-ryzyka-w-cyberbezpieczenstwie\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/blog\\\/author\\\/aleksandramalesaa\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/blog\\\/author\\\/aleksandramalesaa\\\/#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/inteca.com\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/Analiza-ryzyka-w-cyberbezpieczenstwie.png\",\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/insighty-biznesowe\\\/analiza-ryzyka-w-cyberbezpieczenstwie\\\/#mainImage\",\"width\":1000,\"height\":523},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/insighty-biznesowe\\\/analiza-ryzyka-w-cyberbezpieczenstwie\\\/#mainImage\"},\"datePublished\":\"2026-04-08T16:19:48+02:00\",\"dateModified\":\"2026-09-17T15:30:06+02:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/#website\",\"url\":\"https:\\\/\\\/inteca.com\\\/pl\\\/\",\"name\":\"Inteca\",\"alternateName\":\"Inteca\",\"description\":\"IT's about business\",\"inLanguage\":\"pl-PL\",\"publisher\":{\"@id\":\"https:\\\/\\\/inteca.com\\\/pl\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>Analiza ryzyka w cyberbezpiecze\u0144stwie \u2013 KSC i NIS2<\/title>\n\n","aioseo_head_json":{"title":"Analiza ryzyka w cyberbezpiecze\u0144stwie \u2013 KSC i NIS2","description":"Jak prowadzi\u0107 analiz\u0119 ryzyka zgodn\u0105 z KSC i NIS2: metody ISO\/IEC 27005 i NIST SP 800-30, zasada proporcjonalno\u015bci \u015brodk\u00f3w oraz miejsce ryzyka w SZBI.","canonical_url":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/#blogposting","name":"Analiza ryzyka w cyberbezpiecze\u0144stwie \u2013 KSC i NIS2","headline":"Analiza ryzyka w cyberbezpiecze\u0144stwie &#8211; metody i wymagania KSC \/ NIS2","author":{"@id":"https:\/\/inteca.com\/pl\/blog\/author\/aleksandramalesaa\/#author"},"publisher":{"@id":"https:\/\/inteca.com\/pl\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Analiza-ryzyka-w-cyberbezpieczenstwie.png","width":1000,"height":523},"datePublished":"2026-04-08T16:19:48+02:00","dateModified":"2026-09-17T15:30:06+02:00","inLanguage":"pl-PL","mainEntityOfPage":{"@id":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/#webpage"},"isPartOf":{"@id":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/#webpage"},"articleSection":"Zarz\u0105dzanie dost\u0119pem do to\u017csamo\u015bci, NIS2, Ustawa KSC"},{"@type":"BreadcrumbList","@id":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/inteca.com\/pl\/#listItem","position":1,"name":"Inteca","item":"https:\/\/inteca.com\/pl\/","nextItem":{"@type":"ListItem","@id":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/#listItem","name":"Business insights"}},{"@type":"ListItem","@id":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/#listItem","position":2,"name":"Business insights","item":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/","nextItem":{"@type":"ListItem","@id":"https:\/\/inteca.com\/pl\/blog\/category\/zarzadzanie-dostepem-do-tozsamosci\/#listItem","name":"Zarz\u0105dzanie dost\u0119pem do to\u017csamo\u015bci"},"previousItem":{"@type":"ListItem","@id":"https:\/\/inteca.com\/pl\/#listItem","name":"Inteca"}},{"@type":"ListItem","@id":"https:\/\/inteca.com\/pl\/blog\/category\/zarzadzanie-dostepem-do-tozsamosci\/#listItem","position":3,"name":"Zarz\u0105dzanie dost\u0119pem do to\u017csamo\u015bci","item":"https:\/\/inteca.com\/pl\/blog\/category\/zarzadzanie-dostepem-do-tozsamosci\/","nextItem":{"@type":"ListItem","@id":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/#listItem","name":"Analiza ryzyka w cyberbezpiecze\u0144stwie &#8211; metody i wymagania KSC \/ NIS2"},"previousItem":{"@type":"ListItem","@id":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/#listItem","name":"Business insights"}},{"@type":"ListItem","@id":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/#listItem","position":4,"name":"Analiza ryzyka w cyberbezpiecze\u0144stwie &#8211; metody i wymagania KSC \/ NIS2","previousItem":{"@type":"ListItem","@id":"https:\/\/inteca.com\/pl\/blog\/category\/zarzadzanie-dostepem-do-tozsamosci\/#listItem","name":"Zarz\u0105dzanie dost\u0119pem do to\u017csamo\u015bci"}}]},{"@type":"Organization","@id":"https:\/\/inteca.com\/pl\/#organization","name":"Inteca Sp. z o.o.","description":"Inteca is a specialized enterprise platform provider and Red Hat Advanced Partner. We design, implement, and operate mission-critical platforms based on Keycloak, Kafka, OpenShift, and Nuxeo enhanced with AI automation. We work in banking, insurance, and government sectors across the EU and the US.","url":"https:\/\/inteca.com\/pl\/","email":"contact@inteca.com","telephone":"+48717156091","foundingDate":"2011-04-01","numberOfEmployees":{"@type":"QuantitativeValue","value":50},"logo":{"@type":"ImageObject","url":"https:\/\/inteca.com\/wp-content\/uploads\/2022\/01\/Inteca_logo_pion_tagline_JasneTlo.png","@id":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/#organizationLogo","width":288,"height":344},"image":{"@id":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/#organizationLogo"},"sameAs":["https:\/\/www.youtube.com\/@IntecaPl","https:\/\/pl.linkedin.com\/company\/inteca"]},{"@type":"Person","@id":"https:\/\/inteca.com\/pl\/blog\/author\/aleksandramalesaa\/#author","url":"https:\/\/inteca.com\/pl\/blog\/author\/aleksandramalesaa\/","name":"Aleksandra Malesa","image":{"@type":"ImageObject","@id":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/#authorImage","url":"https:\/\/inteca.com\/wp-content\/uploads\/2026\/02\/Aleksandra.jpg","width":560,"height":560},"sameAs":["https:\/\/www.linkedin.com\/in\/aleksandramalesa\/"]},{"@type":"WebPage","@id":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/#webpage","url":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/","name":"Analiza ryzyka w cyberbezpiecze\u0144stwie \u2013 KSC i NIS2","description":"Jak prowadzi\u0107 analiz\u0119 ryzyka zgodn\u0105 z KSC i NIS2: metody ISO\/IEC 27005 i NIST SP 800-30, zasada proporcjonalno\u015bci \u015brodk\u00f3w oraz miejsce ryzyka w SZBI.","inLanguage":"pl-PL","isPartOf":{"@id":"https:\/\/inteca.com\/pl\/#website"},"breadcrumb":{"@id":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/#breadcrumblist"},"author":{"@id":"https:\/\/inteca.com\/pl\/blog\/author\/aleksandramalesaa\/#author"},"creator":{"@id":"https:\/\/inteca.com\/pl\/blog\/author\/aleksandramalesaa\/#author"},"image":{"@type":"ImageObject","url":"https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Analiza-ryzyka-w-cyberbezpieczenstwie.png","@id":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/#mainImage","width":1000,"height":523},"primaryImageOfPage":{"@id":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/#mainImage"},"datePublished":"2026-04-08T16:19:48+02:00","dateModified":"2026-09-17T15:30:06+02:00"},{"@type":"WebSite","@id":"https:\/\/inteca.com\/pl\/#website","url":"https:\/\/inteca.com\/pl\/","name":"Inteca","alternateName":"Inteca","description":"IT's about business","inLanguage":"pl-PL","publisher":{"@id":"https:\/\/inteca.com\/pl\/#organization"}}]},"og:locale":"pl_PL","og:site_name":"Inteca \u00bb IT's about business","og:type":"article","og:title":"Analiza ryzyka w cyberbezpiecze\u0144stwie \u2013 KSC i NIS2","og:description":"Jak prowadzi\u0107 analiz\u0119 ryzyka zgodn\u0105 z KSC i NIS2: metody ISO\/IEC 27005 i NIST SP 800-30, zasada proporcjonalno\u015bci \u015brodk\u00f3w oraz miejsce ryzyka w SZBI.","og:url":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/","og:image":"https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Analiza-ryzyka-w-cyberbezpieczenstwie.png","og:image:secure_url":"https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Analiza-ryzyka-w-cyberbezpieczenstwie.png","og:image:width":1000,"og:image:height":523,"article:published_time":"2026-04-08T14:19:48+00:00","article:modified_time":"2026-09-17T13:30:06+00:00","twitter:card":"summary_large_image","twitter:title":"Analiza ryzyka w cyberbezpiecze\u0144stwie \u2013 KSC i NIS2","twitter:description":"Jak prowadzi\u0107 analiz\u0119 ryzyka zgodn\u0105 z KSC i NIS2: metody ISO\/IEC 27005 i NIST SP 800-30, zasada proporcjonalno\u015bci \u015brodk\u00f3w oraz miejsce ryzyka w SZBI.","twitter:image":"https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Analiza-ryzyka-w-cyberbezpieczenstwie.png"},"aioseo_meta_data":{"post_id":"25338","title":"Analiza ryzyka w cyberbezpiecze\u0144stwie \u2013 KSC i NIS2","description":"Jak prowadzi\u0107 analiz\u0119 ryzyka zgodn\u0105 z KSC i NIS2: metody ISO\/IEC 27005 i NIST SP 800-30, zasada proporcjonalno\u015bci \u015brodk\u00f3w oraz miejsce ryzyka w SZBI.","keywords":null,"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"BlogPosting","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":"0","open_ai":null,"ai":{"faqs":[],"keyPoints":[],"schemas":[],"titles":[],"descriptions":[],"socialPosts":{"email":{"subject":"","preview":"","content":""},"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2026-04-08 13:59:06","updated":"2026-09-17 13:35:40","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/inteca.com\/pl\/\" title=\"Inteca\">Inteca<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/inteca.com\/pl\/insighty-biznesowe\/\" title=\"Business insights\">Business insights<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/inteca.com\/pl\/blog\/category\/zarzadzanie-dostepem-do-tozsamosci\/\" title=\"Zarz\u0105dzanie dost\u0119pem do to\u017csamo\u015bci\">Zarz\u0105dzanie dost\u0119pem do to\u017csamo\u015bci<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\tAnaliza ryzyka w cyberbezpiecze\u0144stwie \u2013 metody i wymagania KSC \/ NIS2\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Inteca","link":"https:\/\/inteca.com\/pl\/"},{"label":"Business insights","link":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/"},{"label":"Zarz\u0105dzanie dost\u0119pem do to\u017csamo\u015bci","link":"https:\/\/inteca.com\/pl\/blog\/category\/zarzadzanie-dostepem-do-tozsamosci\/"},{"label":"Analiza ryzyka w cyberbezpiecze\u0144stwie &#8211; metody i wymagania KSC \/ NIS2","link":"https:\/\/inteca.com\/pl\/insighty-biznesowe\/analiza-ryzyka-w-cyberbezpieczenstwie\/"}],"taxonomy_info":{"category":[{"value":336,"label":"Zarz\u0105dzanie dost\u0119pem do to\u017csamo\u015bci"}],"post_tag":[{"value":399,"label":"NIS2"},{"value":398,"label":"Ustawa KSC"}]},"featured_image_src_large":["https:\/\/inteca.com\/wp-content\/uploads\/2026\/04\/Analiza-ryzyka-w-cyberbezpieczenstwie.png",1000,523,false],"author_info":{"display_name":"Aleksandra Malesa","author_link":"https:\/\/inteca.com\/pl\/blog\/author\/aleksandramalesaa\/"},"comment_info":0,"_links":{"self":[{"href":"https:\/\/inteca.com\/pl\/wp-json\/wp\/v2\/business-insights\/25338","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/inteca.com\/pl\/wp-json\/wp\/v2\/business-insights"}],"about":[{"href":"https:\/\/inteca.com\/pl\/wp-json\/wp\/v2\/types\/business-insights"}],"author":[{"embeddable":true,"href":"https:\/\/inteca.com\/pl\/wp-json\/wp\/v2\/users\/21"}],"replies":[{"embeddable":true,"href":"https:\/\/inteca.com\/pl\/wp-json\/wp\/v2\/comments?post=25338"}],"version-history":[{"count":0,"href":"https:\/\/inteca.com\/pl\/wp-json\/wp\/v2\/business-insights\/25338\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/inteca.com\/pl\/wp-json\/wp\/v2\/media\/25340"}],"wp:attachment":[{"href":"https:\/\/inteca.com\/pl\/wp-json\/wp\/v2\/media?parent=25338"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/inteca.com\/pl\/wp-json\/wp\/v2\/categories?post=25338"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/inteca.com\/pl\/wp-json\/wp\/v2\/tags?post=25338"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}