{"id":9663,"date":"2025-10-22T14:50:56","date_gmt":"2025-10-22T12:50:56","guid":{"rendered":"https:\/\/www.idstory.com\/?p=9663"},"modified":"2025-10-22T14:53:13","modified_gmt":"2025-10-22T12:53:13","slug":"nis2-idm-pozadavky","status":"publish","type":"post","link":"https:\/\/www.idstory.com\/cs\/nis2-idm-pozadavky\/","title":{"rendered":"Co NIS2 skute\u010dn\u011b vy\u017eaduje a jak to pokr\u00fdv\u00e1 modern\u00ed IdM"},"content":{"rendered":"<p><span style=\"font-weight: 400\">Od <\/span><b>1. listopadu 2025<\/b><span style=\"font-weight: 400\"> za\u010dne platit nov\u00fd z\u00e1kon o kybernetick\u00e9 bezpe\u010dnosti, kter\u00fd do \u010desk\u00e9ho pr\u00e1va p\u0159en\u00e1\u0161\u00ed sm\u011brnici <\/span><b>NIS2<\/b><span style=\"font-weight: 400\">. T\u00fdk\u00e1 se mnohem \u0161ir\u0161\u00edho okruhu organizac\u00ed ne\u017e d\u0159\u00edve \u2013 od st\u00e1tn\u00edch instituc\u00ed p\u0159es nemocnice a\u017e po firmy z energetiky, dopravy, v\u00fdroby nebo IT.<\/span><span style=\"font-weight: 400\"><br \/>\n<\/span><span style=\"font-weight: 400\">A s n\u00ed p\u0159ich\u00e1zej\u00ed i nov\u00e9 povinnosti v oblasti spr\u00e1vy p\u0159\u00edstup\u016f, v\u00edcefaktorov\u00e9ho ov\u011b\u0159ov\u00e1n\u00ed a auditu.<\/span><\/p>\n<p><!--more--><\/p>\n<p><span style=\"font-weight: 400\">Za nespln\u011bn\u00ed hroz\u00ed <\/span><b>pokuty a\u017e 250 milion\u016f K\u010d nebo 2 % z celosv\u011btov\u00e9ho obratu<\/b><span style=\"font-weight: 400\"> spole\u010dnosti (podle toho, co je vy\u0161\u0161\u00ed).<\/span><span style=\"font-weight: 400\"><br \/>\n<\/span><span style=\"font-weight: 400\">To z NIS2 d\u011bl\u00e1 t\u00e9ma, kter\u00e9 u\u017e nelze odkl\u00e1dat.<\/span><\/p>\n<h2><b>Kde se NIS2 potk\u00e1v\u00e1 s Identity Managementem<\/b><\/h2>\n<p><span style=\"font-weight: 400\">Sm\u011brnice NIS2, konkr\u00e9tn\u011b <\/span><b>\u010dl\u00e1nek 21 odst. 2<\/b><span style=\"font-weight: 400\">, ukl\u00e1d\u00e1 organizac\u00edm povinnost zav\u00e9st opat\u0159en\u00ed pro:<\/span><\/p>\n<ul>\n<li><b>\u0159\u00edzen\u00ed p\u0159\u00edstup\u016f k informa\u010dn\u00edm aktiv\u016fm (access control)<\/b><\/li>\n<li><b>bezpe\u010dn\u00e9 ov\u011b\u0159ov\u00e1n\u00ed u\u017eivatel\u016f<\/b><\/li>\n<li><b>auditovatelnost a dohledatelnost \u010dinnost\u00ed u\u017eivatel\u016f<\/b><\/li>\n<li><b>\u0159\u00edzen\u00ed \u017eivotn\u00edho cyklu \u00fa\u010dt\u016f a p\u0159\u00edstupov\u00fdch pr\u00e1v<\/b><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p><span style=\"font-weight: 400\">Pr\u00e1v\u011b v t\u011bchto oblastech hraje <\/span><b>Identity Management (IdM)<\/b><span style=\"font-weight: 400\"> kl\u00ed\u010dovou roli.<\/span><span style=\"font-weight: 400\"><br \/>\n<\/span><span style=\"font-weight: 400\">Modern\u00ed IdM syst\u00e9m, jako je <\/span><b>IdStory<\/b><span style=\"font-weight: 400\">, tyto po\u017eadavky pokr\u00fdv\u00e1 p\u0159\u00edmo a umo\u017e\u0148uje je prok\u00e1zat p\u0159i auditu.<\/span><\/p>\n<p><b>Jak konkr\u00e9tn\u011b IdStory napl\u0148uje po\u017eadavky NIS2<\/b><\/p>\n<table>\n<tbody>\n<tr>\n<td><b>Oblast NIS2<\/b><\/td>\n<td><b>Co vy\u017eaduje<\/b><\/td>\n<td><b>Co zaji\u0161\u0165uje IdStory IdM<\/b><\/td>\n<\/tr>\n<tr>\n<td><b>\u0158\u00edzen\u00ed p\u0159\u00edstup\u016f (\u010dl. 21 (2)(i))<\/b><\/td>\n<td><span style=\"font-weight: 400\">P\u0159ehled a kontrola, kdo m\u00e1 kam p\u0159\u00edstup<\/span><\/td>\n<td><span style=\"font-weight: 400\">Centr\u00e1ln\u00ed \u0159\u00edzen\u00ed p\u0159\u00edstup\u016f, automatick\u00e9 p\u0159i\u0159azov\u00e1n\u00ed pr\u00e1v podle rol\u00ed, odstran\u011bn\u00ed \u201emrtv\u00fdch \u00fa\u010dt\u016f\u201c<\/span><\/td>\n<\/tr>\n<tr>\n<td><b>Spr\u00e1va u\u017eivatelsk\u00e9ho \u017eivotn\u00edho cyklu<\/b><\/td>\n<td><span style=\"font-weight: 400\">Okam\u017eit\u00e1 deaktivace p\u0159\u00edstup\u016f po odchodu, p\u0159id\u00e1n\u00ed opr\u00e1vn\u011bn\u00ed p\u0159i n\u00e1stupu<\/span><\/td>\n<td><span style=\"font-weight: 400\">Automatizovan\u00fd proces \u201eJoiner-Mover-Leaver\u201c napojen\u00fd na HR syst\u00e9m a Active Directory<\/span><\/td>\n<\/tr>\n<tr>\n<td><b>V\u00edcefaktorov\u00e9 ov\u011b\u0159ov\u00e1n\u00ed (\u010dl. 21 (2)(j))<\/b><\/td>\n<td><span style=\"font-weight: 400\">Povinn\u00e9 MFA a bezpe\u010dn\u00e9 p\u0159ihl\u00e1\u0161en\u00ed<\/span><\/td>\n<td><span style=\"font-weight: 400\">Integrace s M365, AD a SSO &#8211; jednotn\u00e9 ov\u011b\u0159ov\u00e1n\u00ed a vynucen\u00ed bezpe\u010dnostn\u00edch politik, podpora pro OTP (aplikace, SMS, mail) MFA.<\/span><\/td>\n<\/tr>\n<tr>\n<td><b>Audit a recertifikace p\u0159\u00edstup\u016f<\/b><\/td>\n<td><span style=\"font-weight: 400\">Prokazatelnost krok\u016f a odpov\u011bdnost\u00ed<\/span><\/td>\n<td><span style=\"font-weight: 400\">\u00dapln\u00e1 historie schvalovac\u00edch proces\u016f, pravideln\u00e9 recertifikace pr\u00e1v, reporty pro auditory<\/span><\/td>\n<\/tr>\n<tr>\n<td><b>Privilegovan\u00e9 \u00fa\u010dty (PAM)<\/b><\/td>\n<td><span style=\"font-weight: 400\">Dohled nad kritick\u00fdmi p\u0159\u00edstupy<\/span><\/td>\n<td><span style=\"font-weight: 400\">Evidence a schvalov\u00e1n\u00ed p\u0159\u00edstup\u016f s vysok\u00fdmi opr\u00e1vn\u011bn\u00edmi<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><span style=\"font-weight: 400\">T\u00edm IdStory pom\u00e1h\u00e1 plnit <\/span><b>nejrizikov\u011bj\u0161\u00ed \u010d\u00e1sti NIS2 &#8211; \u010dl. 21(2)(i) a (j)<\/b><span style=\"font-weight: 400\">, kter\u00e9 audito\u0159i obvykle kontroluj\u00ed jako prvn\u00ed.<\/span><\/p>\n<p>&nbsp;<\/p>\n<h2><b>Pro\u010d za\u010d\u00edt \u0159e\u0161it IdM u\u017e te\u010f<\/b><\/h2>\n<p><span style=\"font-weight: 400\">Nasazen\u00ed IdM nen\u00ed jen o instalaci syst\u00e9mu &#8211; zahrnuje anal\u00fdzu a revizi intern\u00edch proces\u016f, napojen\u00ed syst\u00e9m\u016f (typicky <\/span><b>HR \u2192 AD \u2192 M365<\/b><span style=\"font-weight: 400\">) a nastaven\u00ed rol\u00ed a audit\u016f.<\/span><span style=\"font-weight: 400\"><br \/>\n<\/span><span style=\"font-weight: 400\"><br \/>\n<\/span><span style=\"font-weight: 400\">U st\u0159edn\u011b velk\u00fdch organizac\u00ed se <\/span><b>re\u00e1ln\u00e9 nasazen\u00ed zvl\u00e1dne v \u0159\u00e1du n\u011bkolika m\u011bs\u00edc\u016f<\/b><span style=\"font-weight: 400\"> &#8211; obvykle kolem <\/span><b>3 m\u011bs\u00edc\u016f<\/b><span style=\"font-weight: 400\"> od zah\u00e1jen\u00ed projektu, pokud jsou p\u0159ipraven\u00e1 data a definovan\u00e9 procesy.<\/span><\/p>\n<p><span style=\"font-weight: 400\">\u010c\u00edm d\u0159\u00edve se za\u010dne, t\u00edm d\u0159\u00edv lze:<\/span><\/p>\n<ul>\n<li><span style=\"font-weight: 400\">odstranit mrtv\u00e9 \u00fa\u010dty\u201c a duplicitn\u00ed p\u0159\u00edstupy,<\/span><\/li>\n<li><span style=\"font-weight: 400\">sjednotit autentizaci (SSO\/MFA)<\/span><\/li>\n<li><span style=\"font-weight: 400\">a z\u00edskat jistotu, \u017ee p\u0159i auditu nebudete hasit po\u017e\u00e1r na posledn\u00ed chv\u00edli.<\/span><span style=\"font-weight: 400\"><br \/>\n<\/span><\/li>\n<\/ul>\n<h2><\/h2>\n<h2 style=\"text-align: left\"><b>Prvn\u00ed krok: nez\u00e1vazn\u00fd audit p\u0159ipravenosti<\/b><\/h2>\n<p><span style=\"font-weight: 400\">Pokud si nejste jisti, jak va\u0161e organizace aktu\u00e1ln\u011b stoj\u00ed v\u016f\u010di po\u017eadavk\u016fm NIS2 v oblasti spr\u00e1vy identit, nab\u00edz\u00edme <\/span><b>rychl\u00fd audit p\u0159ipravenosti<\/b><span style=\"font-weight: 400\"> &#8211; b\u011bhem jednoho setk\u00e1n\u00ed:<\/span><\/p>\n<ul>\n<li><span style=\"font-weight: 400\">projdeme va\u0161e HR, AD a M365 prost\u0159ed\u00ed,<\/span><\/li>\n<li><span style=\"font-weight: 400\">identifikujeme kl\u00ed\u010dov\u00e1 rizika a mezeru v\u016f\u010di \u010dl. 21 NIS2,<\/span><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h3><strong>Ozv\u011bte se n\u00e1m a domluvte si term\u00edn konzultace<\/strong><\/h3>\n<p><a href=\"https:\/\/calendar.app.google\/yonarv2Kd3ueX4S29\" target=\"_blank\" rel=\"noopener\">Rezervovat term\u00edn<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Od 1. listopadu 2025 za\u010dne platit nov\u00fd z\u00e1kon o kybernetick\u00e9 bezpe\u010dnosti, kter\u00fd do \u010desk\u00e9ho pr\u00e1va p\u0159en\u00e1\u0161\u00ed sm\u011brnici NIS2. T\u00fdk\u00e1 se mnohem \u0161ir\u0161\u00edho okruhu organizac\u00ed ne\u017e d\u0159\u00edve \u2013 od st\u00e1tn\u00edch instituc\u00ed p\u0159es nemocnice a\u017e po firmy z energetiky, dopravy, v\u00fdroby nebo IT. A s n\u00ed p\u0159ich\u00e1zej\u00ed i nov\u00e9 povinnosti v oblasti spr\u00e1vy p\u0159\u00edstup\u016f, v\u00edcefaktorov\u00e9ho ov\u011b\u0159ov\u00e1n\u00ed a [&hellip;]<\/p>\n","protected":false},"author":14,"featured_media":9678,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[33],"tags":[],"class_list":["post-9663","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novinky"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts\/9663","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/comments?post=9663"}],"version-history":[{"count":0,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/posts\/9663\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/media\/9678"}],"wp:attachment":[{"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/media?parent=9663"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/categories?post=9663"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.idstory.com\/cs\/wp-json\/wp\/v2\/tags?post=9663"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}