{"id":7812,"date":"2026-10-07T12:14:47","date_gmt":"2026-10-07T10:14:47","guid":{"rendered":"https:\/\/tenesys.io\/?p=7812"},"modified":"2026-10-07T12:23:37","modified_gmt":"2026-10-07T10:23:37","slug":"ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when","status":"publish","type":"post","link":"https:\/\/tenesys.io\/en\/blog\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\/","title":{"rendered":"KSC 2026\u20132028 \u2013 who does the Act apply to, what needs to be implemented, and by when?"},"content":{"rendered":"<style>.kb-row-layout-id7812_0104c5-d8 > .kt-row-column-wrap{align-content:start;}:where(.kb-row-layout-id7812_0104c5-d8 > .kt-row-column-wrap) > .wp-block-kadence-column{justify-content:start;}.kb-row-layout-id7812_0104c5-d8 > .kt-row-column-wrap{column-gap:var(--global-kb-gap-md, 2rem);row-gap:var(--global-kb-gap-md, 2rem);padding-top:var(--global-kb-spacing-xl, 4rem);padding-bottom:var(--global-kb-spacing-sm, 1.5rem);grid-template-columns:minmax(0, 1fr);}.kb-row-layout-id7812_0104c5-d8{border-top:0px solid var(--global-palette6, #718096);}.kb-row-layout-id7812_0104c5-d8 > .kt-row-layout-overlay{opacity:0.30;}@media all and (max-width: 1024px){.kb-row-layout-id7812_0104c5-d8 > .kt-row-column-wrap{grid-template-columns:minmax(0, 1fr);}}@media all and (max-width: 1024px){.kb-row-layout-id7812_0104c5-d8{border-top:0px solid var(--global-palette6, #718096);}}@media all and (max-width: 767px){.kb-row-layout-id7812_0104c5-d8 > .kt-row-column-wrap{grid-template-columns:minmax(0, 1fr);}.kb-row-layout-id7812_0104c5-d8{border-top:0px solid var(--global-palette6, #718096);}}<\/style><div class=\"kb-row-layout-wrap kb-row-layout-id7812_0104c5-d8 alignnone tenesys-menu-and-content-wrapper wp-block-kadence-rowlayout\"><div class=\"kt-row-column-wrap kt-has-1-columns kt-row-layout-equal kt-tab-layout-inherit kt-mobile-layout-row kt-row-valign-top\">\n<style>.kadence-column7812_a3cb66-d1 > .kt-inside-inner-col{padding-top:var(--global-kb-spacing-xs, 1rem);padding-right:var(--global-kb-spacing-xs, 1rem);padding-bottom:var(--global-kb-spacing-xs, 1rem);padding-left:var(--global-kb-spacing-xs, 1rem);}.kadence-column7812_a3cb66-d1 > .kt-inside-inner-col{box-shadow:0px 0px 10px 0px rgba(30, 30, 30, 0.05);border-top:0px solid #e6e6e6;border-right:0px solid #e6e6e6;border-bottom:0px solid #e6e6e6;border-left:0px solid #e6e6e6;}.kadence-column7812_a3cb66-d1 > .kt-inside-inner-col,.kadence-column7812_a3cb66-d1 > .kt-inside-inner-col:before{border-top-left-radius:8px;border-top-right-radius:8px;border-bottom-right-radius:8px;border-bottom-left-radius:8px;}.kadence-column7812_a3cb66-d1 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column7812_a3cb66-d1 > .kt-inside-inner-col{flex-direction:column;}.kadence-column7812_a3cb66-d1 > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column7812_a3cb66-d1 > .kt-inside-inner-col{background-color:var(--global-palette9, #ffffff);}.kadence-column7812_a3cb66-d1 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column7812_a3cb66-d1{position:relative;}.kadence-column7812_a3cb66-d1, .kt-inside-inner-col > .kadence-column7812_a3cb66-d1:not(.specificity){margin-top:0px;}@media all and (max-width: 1024px){.kadence-column7812_a3cb66-d1 > .kt-inside-inner-col{border-top:0px solid #e6e6e6;border-right:0px solid #e6e6e6;border-bottom:0px solid #e6e6e6;border-left:0px solid #e6e6e6;flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column7812_a3cb66-d1 > .kt-inside-inner-col{border-top:0px solid #e6e6e6;border-right:0px solid #e6e6e6;border-bottom:0px solid #e6e6e6;border-left:0px solid #e6e6e6;flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column7812_a3cb66-d1 kvs-md-false kvs-sm-false tenesys-desktop-internal-menu\"><div class=\"kt-inside-inner-col\"><style>.kb-table-of-content-nav.kb-table-of-content-id7812_02a571-ee .kb-table-of-content-wrap{padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.kb-table-of-content-nav.kb-table-of-content-id7812_02a571-ee .kb-table-of-contents-title-wrap{padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.kb-table-of-content-nav.kb-table-of-content-id7812_02a571-ee .kb-table-of-contents-title{font-weight:regular;font-style:normal;}.kb-table-of-content-nav.kb-table-of-content-id7812_02a571-ee .kb-table-of-content-wrap .kb-table-of-content-list{color:var(--global-palette5, #4A5568);font-size:12px;font-weight:500;font-style:normal;margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;}.kb-table-of-content-nav.kb-table-of-content-id7812_02a571-ee .kb-table-of-content-wrap .kb-table-of-content-list .kb-table-of-contents__entry:hover{color:var(--global-palette4, #2D3748);}.kb-table-of-content-nav.kb-table-of-content-id7812_02a571-ee .kb-table-of-content-wrap .kb-table-of-content-list .active > .kb-table-of-contents__entry{color:var(--global-palette3, #1A202C);}.kb-table-of-content-nav.kb-table-of-content-id7812_02a571-ee .kb-table-of-content-list li{margin-bottom:12px;}.kb-table-of-content-nav.kb-table-of-content-id7812_02a571-ee .kb-table-of-content-list li .kb-table-of-contents-list-sub{margin-top:12px;}@media all and (max-width: 1024px){.kb-table-of-content-nav.kb-table-of-content-id7812_02a571-ee .kb-table-of-content-wrap .kb-table-of-content-list{font-size:14px;}}@media all and (max-width: 1024px){.kb-table-of-content-nav.kb-table-of-content-id7812_02a571-ee .kb-table-of-content-list li{margin-bottom:16px;}}@media all and (max-width: 1024px){.kb-table-of-content-nav.kb-table-of-content-id7812_02a571-ee .kb-table-of-content-list li .kb-table-of-contents-list-sub{margin-top:16px;}}<\/style><\/div><\/div>\n\n\n<style>.kadence-column7812_13054a-d7 > .kt-inside-inner-col{padding-top:0px;}.kadence-column7812_13054a-d7 > .kt-inside-inner-col,.kadence-column7812_13054a-d7 > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column7812_13054a-d7 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column7812_13054a-d7 > .kt-inside-inner-col{flex-direction:column;}.kadence-column7812_13054a-d7 > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column7812_13054a-d7 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column7812_13054a-d7{position:relative;}.kadence-column7812_13054a-d7, .kt-inside-inner-col > .kadence-column7812_13054a-d7:not(.specificity){margin-top:0px;}@media all and (max-width: 1024px){.kadence-column7812_13054a-d7 > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column7812_13054a-d7 > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column7812_13054a-d7 tenesys-content-next-to-internal-menu\"><div class=\"kt-inside-inner-col\"><style>.kb-row-layout-wrap.wp-block-kadence-rowlayout.kb-row-layout-id7812_1db4bc-cd{margin-top:0px;margin-bottom:var(--global-kb-spacing-md, 2rem);}.kb-row-layout-id7812_1db4bc-cd > .kt-row-column-wrap{align-content:start;}:where(.kb-row-layout-id7812_1db4bc-cd > .kt-row-column-wrap) > .wp-block-kadence-column{justify-content:start;}.kb-row-layout-id7812_1db4bc-cd > .kt-row-column-wrap{column-gap:var(--global-kb-gap-md, 2rem);row-gap:var(--global-kb-gap-md, 2rem);max-width:50%;margin-left:auto;margin-right:auto;padding-top:0px;padding-bottom:var(--global-kb-spacing-sm, 1.5rem);grid-template-columns:minmax(0, 1fr);}.kb-row-layout-id7812_1db4bc-cd > .kt-row-layout-overlay{opacity:0.30;}@media all and (max-width: 1024px){.kb-row-layout-id7812_1db4bc-cd > .kt-row-column-wrap{max-width:70%;margin-left:auto;margin-right:auto;grid-template-columns:minmax(0, 1fr);}}@media all and (max-width: 767px){.kb-row-layout-wrap.wp-block-kadence-rowlayout.kb-row-layout-id7812_1db4bc-cd{margin-bottom:var(--global-kb-spacing-sm, 1.5rem);}.kb-row-layout-id7812_1db4bc-cd > .kt-row-column-wrap{max-width:98%;margin-left:auto;margin-right:auto;padding-right:var(--global-kb-spacing-xs, 1rem);padding-left:var(--global-kb-spacing-xs, 1rem);grid-template-columns:minmax(0, 1fr);}}<\/style><div class=\"kb-row-layout-wrap kb-row-layout-id7812_1db4bc-cd alignnone tenesys-section-small-width-on-desktop wp-block-kadence-rowlayout\"><div class=\"kt-row-column-wrap kt-has-1-columns kt-row-layout-equal kt-tab-layout-inherit kt-mobile-layout-row kt-row-valign-top\">\n<style>.kadence-column7812_ea1725-ff > .kt-inside-inner-col{padding-top:0px;}.kadence-column7812_ea1725-ff > .kt-inside-inner-col{border-top:0px solid var(--global-palette6, #718096);}.kadence-column7812_ea1725-ff > .kt-inside-inner-col,.kadence-column7812_ea1725-ff > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column7812_ea1725-ff > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column7812_ea1725-ff > .kt-inside-inner-col{flex-direction:column;}.kadence-column7812_ea1725-ff > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column7812_ea1725-ff > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column7812_ea1725-ff{position:relative;}@media all and (max-width: 1024px){.kadence-column7812_ea1725-ff > .kt-inside-inner-col{border-top:0px solid var(--global-palette6, #718096);flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column7812_ea1725-ff > .kt-inside-inner-col{border-top:0px solid var(--global-palette6, #718096);flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column7812_ea1725-ff\"><div class=\"kt-inside-inner-col\">\n<p>The amendment to the Act on the National Cybersecurity System, which implements the NIS2 Directive, has been in force since 3 April 2026. For many companies and institutions, this means new obligations related to cybersecurity, incident reporting, audits, and management accountability.<\/p>\n\n\n\n<p>Before an organization starts planning KSC implementation, it should determine two things: whether it is subject to the Act and what status it has. The scope of its obligations, the type of supervision, and the deadlines depend on this.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">KSC 2026\u20132028 \u2013 key deadlines<\/h2>\n\n\n\n<p>For organizations covered by the new regulations, there are three key dates.<\/p>\n\n\n\n<figure class=\"wp-block-table is-style-stripes\"><table class=\"has-fixed-layout\"><thead><tr><th>Deadline<\/th><th>What it means<\/th><\/tr><\/thead><tbody><tr><td>3 October 2026<\/td><td>deadline for submitting an application for entry in the KSC Register for entities subject to self-registration<\/td><\/tr><tr><td>3 April 2027<\/td><td>deadline for implementing the obligations under the Act and starting to use the S46 system for entities that met the criteria on the date the amendment entered into force<\/td><\/tr><tr><td>3 April 2028<\/td><td>deadline for the first mandatory audit for essential entities that were not previously operators of essential services<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>Entry in the KSC Register is only the beginning. By 3 April 2027, an organization should have the required processes, documentation, and technical and organizational measures in place. Responsibility for individual areas must also be clearly assigned.<\/p>\n\n\n\n<p>The audit has a separate deadline and its own cycle. The date of 3 April 2028 therefore does not mean there is an extra year to implement KSC requirements.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Who does KSC apply to?<\/h2>\n\n\n\n<p>In a typical case, a company determines for itself whether it meets the criteria set out in the Act. It does not wait for an earlier administrative decision granting it a particular status.<\/p>\n\n\n\n<p>The assessment should take into account:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>the actual type of business activity,<\/li>\n\n\n\n<li>the relevant annex to the Act,<\/li>\n\n\n\n<li>the size of the enterprise,<\/li>\n\n\n\n<li>the special rules set out in Article 5.<\/li>\n<\/ul>\n\n\n\n<p>PKD codes can help, but they should not be the sole basis for the assessment. What matters most is what the organization actually does.<\/p>\n\n\n\n<p>For businesses, company size is also important. The SME criteria for employment and financial data apply here. In some cases, data from partner and linked enterprises must also be included in the calculations.<\/p>\n\n\n\n<p>So a simple test such as \u201c50 employees or EUR 10 million in turnover\u201d can be a starting point, but it is not enough for a final assessment.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Essential entity vs. important entity<\/h3>\n\n\n\n<p>Under the basic rules, the classification looks like this:<\/p>\n\n\n\n<figure class=\"wp-block-table is-style-stripes\"><table class=\"has-fixed-layout\"><thead><tr><th>Activity<\/th><th>Enterprise size<\/th><th>Status<\/th><\/tr><\/thead><tbody><tr><td>Annex No. 1<\/td><td>large enterprise<\/td><td>essential entity<\/td><\/tr><tr><td>Annex No. 1<\/td><td>medium-sized enterprise<\/td><td>important entity<\/td><\/tr><tr><td>Annex No. 2<\/td><td>medium-sized or large enterprise<\/td><td>important entity<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>Annex No. 1 includes, among others, energy, transport, banking and financial market infrastructure, healthcare, water and wastewater management, and digital infrastructure. The last category includes, among others, DNS services, cloud computing, and data centers.<\/p>\n\n\n\n<p>Annex No. 2 includes, among others, postal and courier services, waste management, food production and distribution, selected manufacturing sectors, including medical devices and electronics, as well as certain digital service providers.<\/p>\n\n\n\n<p>This is only the basic framework. Article 5 also provides for situations in which an entity\u2019s status is determined under different rules.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">When does company size not determine whether KSC applies?<\/h3>\n\n\n\n<p>Some organizations are subject to the Act regardless of the standard size thresholds. This includes, among others, DNS service providers, qualified trust service providers, and certain public entities.<\/p>\n\n\n\n<p>Special rules also apply to, among others, electronic communications providers and some entities providing cybersecurity-related services.<\/p>\n\n\n\n<p>The Act also allows a competent authority to designate a specific entity as essential or important by administrative decision.<\/p>\n\n\n\n<p>For this reason, classification should not be treated as a formality. It is a good idea to document the basis on which the organization concluded that it is subject to KSC and which category it falls into. An error at this stage can affect registration, audits, and the type of supervision.<\/p>\n<\/div><\/div>\n\n<\/div><\/div>\n\n<style>.kb-row-layout-wrap.wp-block-kadence-rowlayout.kb-row-layout-id7812_7da33b-1f{margin-top:0px;margin-bottom:var(--global-kb-spacing-md, 2rem);}.kb-row-layout-id7812_7da33b-1f > .kt-row-column-wrap{align-content:start;}:where(.kb-row-layout-id7812_7da33b-1f > .kt-row-column-wrap) > .wp-block-kadence-column{justify-content:start;}.kb-row-layout-id7812_7da33b-1f > .kt-row-column-wrap{column-gap:var(--global-kb-gap-md, 2rem);row-gap:var(--global-kb-gap-md, 2rem);max-width:50%;margin-left:auto;margin-right:auto;padding-top:var(--global-kb-spacing-sm, 1.5rem);padding-bottom:var(--global-kb-spacing-sm, 1.5rem);grid-template-columns:minmax(0, 1fr);}.kb-row-layout-id7812_7da33b-1f > .kt-row-layout-overlay{opacity:0.30;}@media all and (max-width: 1024px){.kb-row-layout-id7812_7da33b-1f > .kt-row-column-wrap{max-width:70%;margin-left:auto;margin-right:auto;grid-template-columns:minmax(0, 1fr);}}@media all and (max-width: 767px){.kb-row-layout-wrap.wp-block-kadence-rowlayout.kb-row-layout-id7812_7da33b-1f{margin-bottom:var(--global-kb-spacing-sm, 1.5rem);}.kb-row-layout-id7812_7da33b-1f > .kt-row-column-wrap{max-width:100%;margin-left:auto;margin-right:auto;padding-right:0px;padding-left:0px;grid-template-columns:minmax(0, 1fr);}.kb-row-layout-id7812_7da33b-1f{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}}<\/style><div class=\"kb-row-layout-wrap kb-row-layout-id7812_7da33b-1f alignnone tenesys-section-small-width-on-desktop wp-block-kadence-rowlayout\"><div class=\"kt-row-column-wrap kt-has-1-columns kt-row-layout-equal kt-tab-layout-inherit kt-mobile-layout-row kt-row-valign-top\">\n<style>.kadence-column7812_b1e82e-ed > .kt-inside-inner-col{padding-top:var(--global-kb-spacing-lg, 3rem);padding-right:var(--global-kb-spacing-lg, 3rem);padding-bottom:var(--global-kb-spacing-lg, 3rem);padding-left:var(--global-kb-spacing-lg, 3rem);}.kadence-column7812_b1e82e-ed > .kt-inside-inner-col,.kadence-column7812_b1e82e-ed > .kt-inside-inner-col:before{border-top-left-radius:4px;border-top-right-radius:4px;border-bottom-right-radius:4px;border-bottom-left-radius:4px;}.kadence-column7812_b1e82e-ed > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column7812_b1e82e-ed > .kt-inside-inner-col{flex-direction:column;}.kadence-column7812_b1e82e-ed > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column7812_b1e82e-ed > .kt-inside-inner-col{background-image:linear-gradient(180deg,var(--global-palette1) 0%,var(--global-palette1) 86%,var(--global-palette2) 86%);}.kadence-column7812_b1e82e-ed > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column7812_b1e82e-ed{position:relative;}@media all and (max-width: 1024px){.kadence-column7812_b1e82e-ed > .kt-inside-inner-col{padding-top:var(--global-kb-spacing-lg, 3rem);padding-right:var(--global-kb-spacing-md, 2rem);padding-bottom:var(--global-kb-spacing-lg, 3rem);padding-left:var(--global-kb-spacing-md, 2rem);flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column7812_b1e82e-ed > .kt-inside-inner-col{padding-top:var(--global-kb-spacing-lg, 3rem);padding-bottom:var(--global-kb-spacing-lg, 3rem);flex-direction:column;justify-content:center;}.kadence-column7812_b1e82e-ed > .kt-inside-inner-col,.kadence-column7812_b1e82e-ed > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column7812_b1e82e-ed kb-section-dir-vertical tenesys-block-bg-blue-navy bg-not-equal\"><div class=\"kt-inside-inner-col\"><style>.wp-block-kadence-advancedheading.kt-adv-heading7812_b21be8-1a, .wp-block-kadence-advancedheading.kt-adv-heading7812_b21be8-1a[data-kb-block=\"kb-adv-heading7812_b21be8-1a\"]{display:block;margin-bottom:var(--global-kb-spacing-sm, 1.5rem);font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading7812_b21be8-1a mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading7812_b21be8-1a[data-kb-block=\"kb-adv-heading7812_b21be8-1a\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading7812_b21be8-1a img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading7812_b21be8-1a[data-kb-block=\"kb-adv-heading7812_b21be8-1a\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<span class=\"kt-adv-heading7812_b21be8-1a eyebrow wp-block-kadence-advancedheading has-theme-palette-9-color has-text-color\" data-kb-block=\"kb-adv-heading7812_b21be8-1a\">our service<\/span>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading7812_13ab6f-1f, .wp-block-kadence-advancedheading.kt-adv-heading7812_13ab6f-1f[data-kb-block=\"kb-adv-heading7812_13ab6f-1f\"]{margin-top:0px;font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading7812_13ab6f-1f mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading7812_13ab6f-1f[data-kb-block=\"kb-adv-heading7812_13ab6f-1f\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading7812_13ab6f-1f img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading7812_13ab6f-1f[data-kb-block=\"kb-adv-heading7812_13ab6f-1f\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 class=\"kt-adv-heading7812_13ab6f-1f toc-ignore wp-block-kadence-advancedheading has-theme-palette-9-color has-text-color\" data-kb-block=\"kb-adv-heading7812_13ab6f-1f\">KSC accountability can&#8217;t be handed off to IT<\/h2>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading7812_ed1df9-16, .wp-block-kadence-advancedheading.kt-adv-heading7812_ed1df9-16[data-kb-block=\"kb-adv-heading7812_ed1df9-16\"]{display:block;margin-bottom:var(--global-kb-spacing-xl, 4rem);font-size:20px;font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading7812_ed1df9-16 mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading7812_ed1df9-16[data-kb-block=\"kb-adv-heading7812_ed1df9-16\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading7812_ed1df9-16 img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading7812_ed1df9-16[data-kb-block=\"kb-adv-heading7812_ed1df9-16\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<span class=\"kt-adv-heading7812_ed1df9-16 wp-block-kadence-advancedheading has-kb-palette-6-color has-text-color\" data-kb-block=\"kb-adv-heading7812_ed1df9-16\">The KSC Act requires members of management to complete cybersecurity training and actively oversee implementation. We run training for boards and risk teams covering NIS2 and KSC obligations, incident management and management&#8217;s personal liability. Afterwards, you receive documentation you can use during an audit or inspection.<\/span>\n\n\n<style>.wp-block-kadence-advancedbtn.kb-btns7812_a850e0-9b{gap:var(--global-kb-gap-xs, 0.5rem );justify-content:flex-start;align-items:center;}.kt-btns7812_a850e0-9b .kt-button{font-weight:normal;font-style:normal;}.kt-btns7812_a850e0-9b .kt-btn-wrap-0{margin-right:5px;}.wp-block-kadence-advancedbtn.kt-btns7812_a850e0-9b .kt-btn-wrap-0 .kt-button{color:#555555;border-color:#555555;}.wp-block-kadence-advancedbtn.kt-btns7812_a850e0-9b .kt-btn-wrap-0 .kt-button:hover, .wp-block-kadence-advancedbtn.kt-btns7812_a850e0-9b .kt-btn-wrap-0 .kt-button:focus{color:#ffffff;border-color:#444444;}.wp-block-kadence-advancedbtn.kt-btns7812_a850e0-9b .kt-btn-wrap-0 .kt-button::before{display:none;}.wp-block-kadence-advancedbtn.kt-btns7812_a850e0-9b .kt-btn-wrap-0 .kt-button:hover, .wp-block-kadence-advancedbtn.kt-btns7812_a850e0-9b .kt-btn-wrap-0 .kt-button:focus{background:#444444;}<\/style>\n<div class=\"wp-block-kadence-advancedbtn kb-buttons-wrap kb-btns7812_a850e0-9b\"><style>ul.menu .wp-block-kadence-advancedbtn .kb-btn7812_9a4456-a5.kb-button{width:initial;}<\/style><a class=\"kb-button kt-button button kb-btn7812_9a4456-a5 kt-btn-size-standard kt-btn-width-type-auto kb-btn-global-inherit button-style-secondary kt-btn-has-text-true kt-btn-has-svg-false  wp-block-button__link wp-block-kadence-singlebtn\" href=\"https:\/\/tenesys.io\/en\/solutions\/security-awareness-training-build-your-companys-defense-shield\/\"><span class=\"kt-btn-inner-text\"><strong><strong><strong>BOOK BOARD TRAINING<\/strong><\/strong><\/strong><\/span><\/a><\/div>\n<\/div><\/div>\n\n<\/div><\/div>\n\n<style>.kb-row-layout-wrap.wp-block-kadence-rowlayout.kb-row-layout-id7812_a189c5-1c{margin-top:0px;margin-bottom:var(--global-kb-spacing-md, 2rem);}.kb-row-layout-id7812_a189c5-1c > .kt-row-column-wrap{align-content:start;}:where(.kb-row-layout-id7812_a189c5-1c > .kt-row-column-wrap) > .wp-block-kadence-column{justify-content:start;}.kb-row-layout-id7812_a189c5-1c > .kt-row-column-wrap{column-gap:var(--global-kb-gap-md, 2rem);row-gap:var(--global-kb-gap-md, 2rem);max-width:50%;margin-left:auto;margin-right:auto;padding-top:var(--global-kb-spacing-sm, 1.5rem);padding-bottom:var(--global-kb-spacing-sm, 1.5rem);grid-template-columns:minmax(0, 1fr);}.kb-row-layout-id7812_a189c5-1c > .kt-row-layout-overlay{opacity:0.30;}@media all and (max-width: 1024px){.kb-row-layout-id7812_a189c5-1c > .kt-row-column-wrap{max-width:70%;margin-left:auto;margin-right:auto;grid-template-columns:minmax(0, 1fr);}}@media all and (max-width: 767px){.kb-row-layout-wrap.wp-block-kadence-rowlayout.kb-row-layout-id7812_a189c5-1c{margin-bottom:var(--global-kb-spacing-sm, 1.5rem);}.kb-row-layout-id7812_a189c5-1c > .kt-row-column-wrap{max-width:98%;margin-left:auto;margin-right:auto;padding-right:var(--global-kb-spacing-xs, 1rem);padding-left:var(--global-kb-spacing-xs, 1rem);grid-template-columns:minmax(0, 1fr);}}<\/style><div class=\"kb-row-layout-wrap kb-row-layout-id7812_a189c5-1c alignnone tenesys-section-small-width-on-desktop wp-block-kadence-rowlayout\"><div class=\"kt-row-column-wrap kt-has-1-columns kt-row-layout-equal kt-tab-layout-inherit kt-mobile-layout-row kt-row-valign-top\">\n<style>.kadence-column7812_f98674-31 > .kt-inside-inner-col{padding-top:var(--global-kb-spacing-lg, 3rem);}.kadence-column7812_f98674-31 > .kt-inside-inner-col{border-top:1px solid var(--global-palette6, #718096);}.kadence-column7812_f98674-31 > .kt-inside-inner-col,.kadence-column7812_f98674-31 > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column7812_f98674-31 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column7812_f98674-31 > .kt-inside-inner-col{flex-direction:column;}.kadence-column7812_f98674-31 > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column7812_f98674-31 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column7812_f98674-31{position:relative;}@media all and (max-width: 1024px){.kadence-column7812_f98674-31 > .kt-inside-inner-col{border-top:1px solid var(--global-palette6, #718096);flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column7812_f98674-31 > .kt-inside-inner-col{border-top:1px solid var(--global-palette6, #718096);flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column7812_f98674-31\"><div class=\"kt-inside-inner-col\">\n<h2 class=\"wp-block-heading\">What obligations does KSC impose?<\/h2>\n\n\n\n<p>Entry in the KSC Register is only the first step. The organization must put its cybersecurity management in order, prepare an incident handling process, and determine who is responsible for meeting each requirement.<\/p>\n\n\n\n<p>In practice, the obligations can be grouped into four areas.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">1. Information Security Management System<\/h3>\n\n\n\n<p>The ISMS should operate as an ongoing, documented process. It includes, among other things, regular risk assessments and the selection of appropriate organizational and technical measures.<\/p>\n\n\n\n<p>Preparing policies and procedures is not enough. The organization must actually manage security and continuously adjust safeguards to the risks it has identified.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. Incident handling and reporting<\/h3>\n\n\n\n<p>The company must prepare a process for detecting, classifying, handling, and reporting incidents.<\/p>\n\n\n\n<p>A significant incident is reported in stages. An early warning must be submitted to the relevant CSIRT within 24 hours, the formal incident notification within 72 hours, and the final report, as a rule, within one month.<\/p>\n\n\n\n<p>To meet these deadlines, roles, escalation paths, and decision-making rules must be defined in advance. A procedure prepared only after an incident occurs will be too late.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. Security audit<\/h3>\n\n\n\n<p>Essential entities are required to conduct security audits of their information systems. Subsequent audits must be carried out at least once every three years.<\/p>\n\n\n\n<p>For essential entities that were not previously operators of essential services, the deadline for the first audit is 3 April 2028.<\/p>\n\n\n\n<p>Important entities are not subject to the same recurring audit requirement, but they may be subject to inspections and supervisory measures provided for in the Act.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. Management oversight<\/h3>\n\n\n\n<p>The head of the entity is responsible for overseeing compliance with cybersecurity obligations. This includes security organization, division of responsibilities, provision of resources, and oversight of the implementation of adopted measures.<\/p>\n\n\n\n<p>The Act also imposes requirements related to training for members of management and the competence of people responsible for cybersecurity.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Who is responsible for KSC implementation in a company?<\/h2>\n\n\n\n<p>KSC is not a project for the IT department alone. Implementation involves several functions, so responsibilities should be divided before the work begins.<\/p>\n\n\n\n<figure class=\"wp-block-table is-style-stripes\"><table class=\"has-fixed-layout\"><thead><tr><th>Role<\/th><th>Main responsibility<\/th><\/tr><\/thead><tbody><tr><td>Management Board<\/td><td>oversight, budget, policy approval, allocation of responsibilities, training<\/td><\/tr><tr><td>CISO \/ security<\/td><td>gap analysis, risk assessment, asset inventory, documentation, ISMS coordination<\/td><\/tr><tr><td>IT<\/td><td>implementation of technical and operational measures<\/td><\/tr><tr><td>Compliance \/ legal<\/td><td>entity classification, registration, KSC Register, deadlines, compliance records<\/td><\/tr><tr><td>HR<\/td><td>training, onboarding, offboarding, and personnel requirements<\/td><\/tr><tr><td>Procurement<\/td><td>security requirements for suppliers and appropriate contractual provisions<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>Without this division, it is easy to end up in a situation where IT is waiting for compliance, compliance is waiting for the CISO, and overall responsibility remains unclear.<\/p>\n\n\n\n<p>Assigning a task to another person does not automatically transfer the responsibility of the head of the entity.<\/p>\n\n\n\n<p>In a multi-member governing body, responsibility rests with the members of that body in accordance with the rules set out in the Act, taking into account the possibility of appointing a person responsible for carrying out the obligations. Delegating work does not replace oversight of how it is carried out.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What penalties does KSC provide for?<\/h2>\n\n\n\n<p>The Act distinguishes between the liability of the organization and that of its head.<\/p>\n\n\n\n<figure class=\"wp-block-table is-style-stripes\"><table class=\"has-fixed-layout\"><thead><tr><th>Who may be penalized<\/th><th>Amount<\/th><\/tr><\/thead><tbody><tr><td>Essential entity<\/td><td>up to EUR 10 million or 2% of revenue from business activity earned in the previous financial year \u2013 whichever amount is higher; minimum PLN 20,000<\/td><\/tr><tr><td>Important entity<\/td><td>up to EUR 7 million or 1.4% of revenue from business activity earned in the previous financial year; minimum PLN 15,000<\/td><\/tr><tr><td>Head of a private entity<\/td><td>up to 300% of the remuneration received by the person being penalized<\/td><\/tr><tr><td>Head of a public entity<\/td><td>up to 100% of the remuneration received by the person being penalized<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p>For penalties imposed on the head of an entity, remuneration is calculated according to the rules used to calculate cash compensation for unused leave.<\/p>\n\n\n\n<p>For infringements causing, among other things, a direct and serious cyber threat to national security, public security and public order, human life and health, or a risk of serious damage or disruption to service delivery, the Act also allows a penalty of up to PLN 100 million to be imposed on the entity.<\/p>\n\n\n\n<p>In certain situations, temporary suspension from management duties may also be possible. Management liability may also involve the risk of recourse claims.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Where should KSC implementation start?<\/h2>\n\n\n\n<p>The first step is to determine whether the organization is subject to the Act and what status it has. Only then can the scope of obligations be defined, responsibilities assigned, and an implementation plan prepared.<\/p>\n\n\n\n<p>In practice, the process looks like this:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>determining the actual type of activity and the size of the organization,<\/li>\n\n\n\n<li>checking the relevant annexes and the rules set out in Article 5,<\/li>\n\n\n\n<li>determining the entity\u2019s status,<\/li>\n\n\n\n<li>determining how the entity should be entered in the KSC Register,<\/li>\n\n\n\n<li>assigning owners to individual obligations,<\/li>\n\n\n\n<li>conducting a gap analysis,<\/li>\n\n\n\n<li>preparing an implementation roadmap.<\/li>\n<\/ol>\n\n\n\n<p>For entities subject to self-registration, the deadline for submitting an application for entry in the KSC Register is 3 October 2026.<\/p>\n\n\n\n<p>By 3 April 2027, entities that met the criteria on the date the amendment entered into force should have implemented the obligations arising from the new regulations.<\/p>\n\n\n\n<p>A good gap analysis shows exactly what is missing, who should address it, and in what order. Based on this, the organization can prepare an implementation roadmap instead of running several disconnected projects under the common label of \u201cNIS2.\u201d<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What comes next after KSC classification?<\/h2>\n\n\n\n<p>Once the organization\u2019s status has been determined, the next stages of work can begin:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>KSC implementation roadmap \u2013 how to turn the requirements of the Act into tasks, owners, and deadlines,<\/li>\n\n\n\n<li>ISMS under KSC \u2013 how to organize the information security management system,<\/li>\n\n\n\n<li>incident handling \u2013 how to prepare the company to report within 24 hours, 72 hours, and one month,<\/li>\n\n\n\n<li>supply chain security \u2013 how to manage supplier risk and contractual requirements,<\/li>\n\n\n\n<li>management board obligations \u2013 how to organize oversight and document compliance with the obligations.<\/li>\n<\/ul>\n\n\n\n<p>If the organization is subject to KSC, the next step should be a gap analysis and a work roadmap leading up to 3 April 2027.<\/p>\n<\/div><\/div>\n\n<\/div><\/div><\/div><\/div>\n\n<\/div><\/div>\n\n<style>.kb-row-layout-wrap.wp-block-kadence-rowlayout.kb-row-layout-id7812_c3ed0e-ff{margin-bottom:var(--global-kb-spacing-xl, 4rem);}.kb-row-layout-id7812_c3ed0e-ff > .kt-row-column-wrap{align-content:start;}:where(.kb-row-layout-id7812_c3ed0e-ff > .kt-row-column-wrap) > .wp-block-kadence-column{justify-content:start;}.kb-row-layout-id7812_c3ed0e-ff > .kt-row-column-wrap{column-gap:var(--global-kb-gap-none, 0rem );row-gap:var(--global-kb-gap-none, 0rem );max-width:670px;margin-left:auto;margin-right:auto;padding-top:var(--global-kb-spacing-sm, 1.5rem);padding-bottom:var(--global-kb-spacing-sm, 1.5rem);grid-template-columns:repeat(2, minmax(0, 1fr));}.kb-row-layout-id7812_c3ed0e-ff > .kt-row-layout-overlay{opacity:0.30;}@media all and (max-width: 1024px){.kb-row-layout-id7812_c3ed0e-ff > .kt-row-column-wrap{grid-template-columns:repeat(2, minmax(0, 1fr));}}@media all and (max-width: 767px){.kb-row-layout-id7812_c3ed0e-ff > .kt-row-column-wrap{padding-right:var(--global-kb-spacing-xs, 1rem);padding-left:var(--global-kb-spacing-xs, 1rem);grid-template-columns:minmax(0, 1fr);}}<\/style><div class=\"kb-row-layout-wrap kb-row-layout-id7812_c3ed0e-ff alignnone wp-block-kadence-rowlayout\"><div class=\"kt-row-column-wrap kt-has-2-columns kt-row-layout-equal kt-tab-layout-inherit kt-mobile-layout-row kt-row-valign-top kt-inner-column-height-full\">\n<style>.kadence-column7812_b4bbfa-f4 > .kt-inside-inner-col,.kadence-column7812_b4bbfa-f4 > .kt-inside-inner-col:before{border-top-left-radius:8px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:8px;}.kadence-column7812_b4bbfa-f4 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column7812_b4bbfa-f4 > .kt-inside-inner-col{flex-direction:column;}.kadence-column7812_b4bbfa-f4 > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column7812_b4bbfa-f4 > .kt-inside-inner-col{background-image:url('https:\/\/tenesys.io\/wp-content\/uploads\/2026\/04\/TENESYS-1-JPEGmini-2600px-scaled.jpg');background-size:cover;background-position:center center;background-attachment:scroll;background-repeat:no-repeat;}.kadence-column7812_b4bbfa-f4 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column7812_b4bbfa-f4{position:relative;}@media all and (max-width: 1024px){.kadence-column7812_b4bbfa-f4 > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column7812_b4bbfa-f4 > .kt-inside-inner-col,.kadence-column7812_b4bbfa-f4 > .kt-inside-inner-col:before{border-top-left-radius:8px;border-top-right-radius:8px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column7812_b4bbfa-f4 > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column7812_b4bbfa-f4\"><div class=\"kt-inside-inner-col\"><style>.kadence-column7812_058eb9-1e > .kt-inside-inner-col,.kadence-column7812_058eb9-1e > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column7812_058eb9-1e > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column7812_058eb9-1e > .kt-inside-inner-col{flex-direction:column;}.kadence-column7812_058eb9-1e > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column7812_058eb9-1e > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column7812_058eb9-1e{position:relative;}@media all and (max-width: 1024px){.kadence-column7812_058eb9-1e > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column7812_058eb9-1e > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column7812_058eb9-1e kvs-lg-false kvs-md-false\"><div class=\"kt-inside-inner-col\"><style>.kb-image7812_08fac0-a8 .kb-image-has-overlay:after{opacity:0.3;}@media all and (max-width: 767px){.kb-image7812_08fac0-a8 .kb-image-has-overlay:after{border-top-left-radius:8px;border-top-right-radius:8px;}.kb-image7812_08fac0-a8 img.kb-img, .kb-image7812_08fac0-a8 .kb-img img{border-top-left-radius:8px;border-top-right-radius:8px;}}<\/style>\n<figure class=\"wp-block-kadence-image kb-image7812_08fac0-a8 size-full kb-image-is-ratio-size\"><div class=\"kb-is-ratio-image kb-image-ratio-land169\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/tenesys.io\/wp-content\/uploads\/2026\/04\/TENESYS-1-JPEGmini-2600px-scaled.jpg\" alt=\"\" width=\"2560\" height=\"1828\" class=\"kb-img wp-image-4904 \" srcset=\"https:\/\/tenesys.io\/wp-content\/uploads\/2026\/04\/TENESYS-1-JPEGmini-2600px-scaled.jpg 2560w, https:\/\/tenesys.io\/wp-content\/uploads\/2026\/04\/TENESYS-1-JPEGmini-2600px-300x214.jpg 300w, https:\/\/tenesys.io\/wp-content\/uploads\/2026\/04\/TENESYS-1-JPEGmini-2600px-1024x731.jpg 1024w, https:\/\/tenesys.io\/wp-content\/uploads\/2026\/04\/TENESYS-1-JPEGmini-2600px-768x549.jpg 768w, https:\/\/tenesys.io\/wp-content\/uploads\/2026\/04\/TENESYS-1-JPEGmini-2600px-1536x1097.jpg 1536w, https:\/\/tenesys.io\/wp-content\/uploads\/2026\/04\/TENESYS-1-JPEGmini-2600px-2048x1463.jpg 2048w\" sizes=\"auto, (max-width: 2560px) 100vw, 2560px\" \/><\/div><\/figure>\n<\/div><\/div>\n<\/div><\/div>\n\n\n<style>.kadence-column7812_014d80-b5 > .kt-inside-inner-col{display:flex;}.kadence-column7812_014d80-b5 > .kt-inside-inner-col{padding-top:var(--global-kb-spacing-md, 2rem);padding-right:var(--global-kb-spacing-md, 2rem);padding-bottom:var(--global-kb-spacing-md, 2rem);padding-left:var(--global-kb-spacing-md, 2rem);}.kadence-column7812_014d80-b5 > .kt-inside-inner-col,.kadence-column7812_014d80-b5 > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:8px;border-bottom-right-radius:8px;border-bottom-left-radius:0px;}.kadence-column7812_014d80-b5 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column7812_014d80-b5 > .kt-inside-inner-col{flex-direction:column;justify-content:space-between;}.kadence-column7812_014d80-b5 > .kt-inside-inner-col > .aligncenter{width:100%;}.kt-row-column-wrap > .kadence-column7812_014d80-b5{align-self:center;}.kt-inner-column-height-full:not(.kt-has-1-columns) > .wp-block-kadence-column.kadence-column7812_014d80-b5{align-self:auto;}.kt-inner-column-height-full:not(.kt-has-1-columns) > .wp-block-kadence-column.kadence-column7812_014d80-b5 > .kt-inside-inner-col{flex-direction:column;justify-content:space-between;}.kadence-column7812_014d80-b5 > .kt-inside-inner-col{background-color:var(--global-palette3, #1A202C);}.kadence-column7812_014d80-b5 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column7812_014d80-b5{position:relative;}@media all and (max-width: 1024px){.kt-row-column-wrap > .kadence-column7812_014d80-b5{align-self:center;}}@media all and (max-width: 1024px){.kt-inner-column-height-full:not(.kt-has-1-columns) > .wp-block-kadence-column.kadence-column7812_014d80-b5{align-self:auto;}}@media all and (max-width: 1024px){.kt-inner-column-height-full:not(.kt-has-1-columns) > .wp-block-kadence-column.kadence-column7812_014d80-b5 > .kt-inside-inner-col{flex-direction:column;justify-content:space-between;}}@media all and (max-width: 1024px){.kadence-column7812_014d80-b5 > .kt-inside-inner-col{flex-direction:column;justify-content:space-between;}}@media all and (max-width: 767px){.kadence-column7812_014d80-b5 > .kt-inside-inner-col,.kadence-column7812_014d80-b5 > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:8px;border-bottom-left-radius:8px;}.kt-row-column-wrap > .kadence-column7812_014d80-b5{align-self:center;}.kt-inner-column-height-full:not(.kt-has-1-columns) > .wp-block-kadence-column.kadence-column7812_014d80-b5{align-self:auto;}.kt-inner-column-height-full:not(.kt-has-1-columns) > .wp-block-kadence-column.kadence-column7812_014d80-b5 > .kt-inside-inner-col{flex-direction:column;justify-content:space-between;}.kadence-column7812_014d80-b5 > .kt-inside-inner-col{flex-direction:column;justify-content:space-between;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column7812_014d80-b5\"><div class=\"kt-inside-inner-col\"><style>.kadence-column7812_f6a269-88 > .kt-inside-inner-col,.kadence-column7812_f6a269-88 > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column7812_f6a269-88 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column7812_f6a269-88 > .kt-inside-inner-col{flex-direction:column;}.kadence-column7812_f6a269-88 > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column7812_f6a269-88 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column7812_f6a269-88{position:relative;}.kadence-column7812_f6a269-88, .kt-inside-inner-col > .kadence-column7812_f6a269-88:not(.specificity){margin-bottom:var(--global-kb-spacing-sm, 1.5rem);}@media all and (max-width: 1024px){.kadence-column7812_f6a269-88 > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column7812_f6a269-88 > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column7812_f6a269-88\"><div class=\"kt-inside-inner-col\"><style>.wp-block-kadence-advancedheading.kt-adv-heading7812_ac2a73-f6, .wp-block-kadence-advancedheading.kt-adv-heading7812_ac2a73-f6[data-kb-block=\"kb-adv-heading7812_ac2a73-f6\"]{margin-bottom:var(--global-kb-spacing-md, 2rem);font-size:12px;font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading7812_ac2a73-f6 mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading7812_ac2a73-f6[data-kb-block=\"kb-adv-heading7812_ac2a73-f6\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading7812_ac2a73-f6 img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading7812_ac2a73-f6[data-kb-block=\"kb-adv-heading7812_ac2a73-f6\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 class=\"kt-adv-heading7812_ac2a73-f6 eyebrow toc-ignore wp-block-kadence-advancedheading has-theme-palette-9-color has-text-color\" data-kb-block=\"kb-adv-heading7812_ac2a73-f6\">\u0141ukasz Ratajczyk<\/h2>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading7812_910277-a6, .wp-block-kadence-advancedheading.kt-adv-heading7812_910277-a6[data-kb-block=\"kb-adv-heading7812_910277-a6\"]{margin-top:0px;margin-bottom:var(--global-kb-spacing-xxs, 0.5rem);font-size:24px;font-weight:300;font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading7812_910277-a6 mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading7812_910277-a6[data-kb-block=\"kb-adv-heading7812_910277-a6\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading7812_910277-a6 img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading7812_910277-a6[data-kb-block=\"kb-adv-heading7812_910277-a6\"] img.kb-inline-image{width:150px;vertical-align:baseline;}@media all and (max-width: 1024px){.wp-block-kadence-advancedheading.kt-adv-heading7812_910277-a6, .wp-block-kadence-advancedheading.kt-adv-heading7812_910277-a6[data-kb-block=\"kb-adv-heading7812_910277-a6\"]{font-size:23px;}}@media all and (max-width: 767px){.wp-block-kadence-advancedheading.kt-adv-heading7812_910277-a6, .wp-block-kadence-advancedheading.kt-adv-heading7812_910277-a6[data-kb-block=\"kb-adv-heading7812_910277-a6\"]{font-size:22px;}}<\/style>\n<h3 class=\"kt-adv-heading7812_910277-a6 toc-ignore wp-block-kadence-advancedheading has-theme-palette-9-color has-text-color\" data-kb-block=\"kb-adv-heading7812_910277-a6\">\u0141ukasz Ratajczyk<\/h3>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading7812_b92554-9d, .wp-block-kadence-advancedheading.kt-adv-heading7812_b92554-9d[data-kb-block=\"kb-adv-heading7812_b92554-9d\"]{margin-bottom:var(--global-kb-spacing-sm, 1.5rem);font-size:24px;font-weight:300;font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading7812_b92554-9d mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading7812_b92554-9d[data-kb-block=\"kb-adv-heading7812_b92554-9d\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading7812_b92554-9d img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading7812_b92554-9d[data-kb-block=\"kb-adv-heading7812_b92554-9d\"] img.kb-inline-image{width:150px;vertical-align:baseline;}@media all and (max-width: 1024px){.wp-block-kadence-advancedheading.kt-adv-heading7812_b92554-9d, .wp-block-kadence-advancedheading.kt-adv-heading7812_b92554-9d[data-kb-block=\"kb-adv-heading7812_b92554-9d\"]{font-size:23px;}}@media all and (max-width: 767px){.wp-block-kadence-advancedheading.kt-adv-heading7812_b92554-9d, .wp-block-kadence-advancedheading.kt-adv-heading7812_b92554-9d[data-kb-block=\"kb-adv-heading7812_b92554-9d\"]{font-size:22px;}}<\/style>\n<h3 class=\"kt-adv-heading7812_b92554-9d toc-ignore wp-block-kadence-advancedheading has-theme-palette-5-color has-text-color\" data-kb-block=\"kb-adv-heading7812_b92554-9d\">CTO<\/h3>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading7812_222304-55, .wp-block-kadence-advancedheading.kt-adv-heading7812_222304-55[data-kb-block=\"kb-adv-heading7812_222304-55\"]{font-size:14px;font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading7812_222304-55 mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading7812_222304-55[data-kb-block=\"kb-adv-heading7812_222304-55\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading7812_222304-55 img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading7812_222304-55[data-kb-block=\"kb-adv-heading7812_222304-55\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<p class=\"kt-adv-heading7812_222304-55 wp-block-kadence-advancedheading has-kb-palette-10-color has-text-color\" data-kb-block=\"kb-adv-heading7812_222304-55\">CTO with 12 years of experience across various industries. Specializes in optimizing cloud environments and modernizing infrastructure. A certified cloud architect, he leads a team of experienced DevOps engineers at Tenesys. Outside of work, he is a traveler and mountain biker.   <\/p>\n<\/div><\/div>\n\n\n<style>.wp-block-kadence-advancedheading.kt-adv-heading7812_419ea0-d4, .wp-block-kadence-advancedheading.kt-adv-heading7812_419ea0-d4[data-kb-block=\"kb-adv-heading7812_419ea0-d4\"]{font-size:12px;font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading7812_419ea0-d4 mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading7812_419ea0-d4[data-kb-block=\"kb-adv-heading7812_419ea0-d4\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading7812_419ea0-d4 img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading7812_419ea0-d4[data-kb-block=\"kb-adv-heading7812_419ea0-d4\"] img.kb-inline-image{width:150px;vertical-align:baseline;}.wp-block-kadence-advancedheading.kt-adv-heading7812_419ea0-d4[data-kb-block=\"kb-adv-heading7812_419ea0-d4\"] a, .kt-adv-heading-link7812_419ea0-d4, .kt-adv-heading-link7812_419ea0-d4 .kt-adv-heading7812_419ea0-d4[data-kb-block=\"kb-adv-heading7812_419ea0-d4\"]{color:var(--global-palette7, #EDF2F7);}.wp-block-kadence-advancedheading.kt-adv-heading7812_419ea0-d4[data-kb-block=\"kb-adv-heading7812_419ea0-d4\"] a:hover, .kt-adv-heading-link7812_419ea0-d4:hover, .kt-adv-heading-link7812_419ea0-d4:hover .kt-adv-heading7812_419ea0-d4[data-kb-block=\"kb-adv-heading7812_419ea0-d4\"]{color:var(--global-palette7, #EDF2F7);}.wp-block-kadence-advancedheading.kt-adv-heading7812_419ea0-d4[data-kb-block=\"kb-adv-heading7812_419ea0-d4\"] a, a.kb-advanced-heading-link.kt-adv-heading-link7812_419ea0-d4{text-decoration:underline;}.wp-block-kadence-advancedheading.kt-adv-heading7812_419ea0-d4[data-kb-block=\"kb-adv-heading7812_419ea0-d4\"] a:hover, a.kb-advanced-heading-link.kt-adv-heading-link7812_419ea0-d4:hover{text-decoration:underline;}<\/style>\n<a href=\"https:\/\/www.linkedin.com\/in\/lukaszratajczyk\/\" class=\"kb-advanced-heading-link kt-adv-heading-link7812_419ea0-d4 hls-underline\" target=\"_blank\" rel=\"noopener noreferrer\"><p class=\"kt-adv-heading7812_419ea0-d4 wp-block-kadence-advancedheading has-theme-palette-7-color has-text-color\" data-kb-block=\"kb-adv-heading7812_419ea0-d4\">Linkedin<\/p><\/a>\n<\/div><\/div>\n\n<\/div><\/div>\n\n<style>.kb-row-layout-wrap.wp-block-kadence-rowlayout.kb-row-layout-id7812_3bc9da-f6{margin-bottom:var(--global-kb-spacing-lg, 3rem);}.kb-row-layout-id7812_3bc9da-f6 > .kt-row-column-wrap{align-content:start;}:where(.kb-row-layout-id7812_3bc9da-f6 > .kt-row-column-wrap) > .wp-block-kadence-column{justify-content:start;}.kb-row-layout-id7812_3bc9da-f6 > .kt-row-column-wrap{column-gap:var(--global-kb-gap-md, 2rem);row-gap:var(--global-kb-gap-md, 2rem);max-width:var( --global-content-width, 1600px );padding-left:var(--global-content-edge-padding);padding-right:var(--global-content-edge-padding);padding-top:var(--global-kb-spacing-sm, 1.5rem);padding-bottom:var(--global-kb-spacing-sm, 1.5rem);grid-template-columns:minmax(0, 1fr);}.kb-row-layout-id7812_3bc9da-f6 > .kt-row-layout-overlay{opacity:0.30;}@media all and (max-width: 1024px){.kb-row-layout-id7812_3bc9da-f6 > .kt-row-column-wrap{grid-template-columns:minmax(0, 1fr);}}@media all and (max-width: 767px){.kb-row-layout-id7812_3bc9da-f6 > .kt-row-column-wrap{grid-template-columns:minmax(0, 1fr);}}<\/style><div class=\"kb-row-layout-wrap kb-row-layout-id7812_3bc9da-f6 alignnone tenesys-block-recommended-articles wp-block-kadence-rowlayout\"><div class=\"kt-row-column-wrap kt-has-1-columns kt-row-layout-equal kt-tab-layout-inherit kt-mobile-layout-row kt-row-valign-top kb-theme-content-width\">\n<style>.kadence-column7812_1bc5e9-45 > .kt-inside-inner-col{padding-top:var(--global-kb-spacing-lg, 3rem);padding-bottom:var(--global-kb-spacing-xs, 1rem);}.kadence-column7812_1bc5e9-45 > .kt-inside-inner-col{border-top:1px solid var(--global-palette6, #718096);border-right:0px solid var(--global-palette6, #718096);border-bottom:0px solid var(--global-palette6, #718096);border-left:0px solid var(--global-palette6, #718096);}.kadence-column7812_1bc5e9-45 > .kt-inside-inner-col,.kadence-column7812_1bc5e9-45 > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column7812_1bc5e9-45 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column7812_1bc5e9-45 > .kt-inside-inner-col{flex-direction:column;}.kadence-column7812_1bc5e9-45 > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column7812_1bc5e9-45 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column7812_1bc5e9-45{position:relative;}@media all and (max-width: 1024px){.kadence-column7812_1bc5e9-45 > .kt-inside-inner-col{border-top:1px solid var(--global-palette6, #718096);border-right:0px solid var(--global-palette6, #718096);border-bottom:0px solid var(--global-palette6, #718096);border-left:0px solid var(--global-palette6, #718096);flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column7812_1bc5e9-45 > .kt-inside-inner-col{border-top:1px solid var(--global-palette6, #718096);border-right:0px solid var(--global-palette6, #718096);border-bottom:0px solid var(--global-palette6, #718096);border-left:0px solid var(--global-palette6, #718096);flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column7812_1bc5e9-45\"><div class=\"kt-inside-inner-col\"><style>.wp-block-kadence-advancedheading.kt-adv-heading7812_f2bce1-74, .wp-block-kadence-advancedheading.kt-adv-heading7812_f2bce1-74[data-kb-block=\"kb-adv-heading7812_f2bce1-74\"]{font-style:normal;}.wp-block-kadence-advancedheading.kt-adv-heading7812_f2bce1-74 mark.kt-highlight, .wp-block-kadence-advancedheading.kt-adv-heading7812_f2bce1-74[data-kb-block=\"kb-adv-heading7812_f2bce1-74\"] mark.kt-highlight{font-style:normal;color:#f76a0c;-webkit-box-decoration-break:clone;box-decoration-break:clone;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.wp-block-kadence-advancedheading.kt-adv-heading7812_f2bce1-74 img.kb-inline-image, .wp-block-kadence-advancedheading.kt-adv-heading7812_f2bce1-74[data-kb-block=\"kb-adv-heading7812_f2bce1-74\"] img.kb-inline-image{width:150px;vertical-align:baseline;}<\/style>\n<h2 class=\"kt-adv-heading7812_f2bce1-74 toc-ignore wp-block-kadence-advancedheading has-theme-palette-3-color has-text-color\" data-kb-block=\"kb-adv-heading7812_f2bce1-74\">Read also:<\/h2>\n<\/div><\/div>\n\n\n<style>.kadence-column7812_546522-a1 > .kt-inside-inner-col,.kadence-column7812_546522-a1 > .kt-inside-inner-col:before{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;}.kadence-column7812_546522-a1 > .kt-inside-inner-col{column-gap:var(--global-kb-gap-sm, 1rem);}.kadence-column7812_546522-a1 > .kt-inside-inner-col{flex-direction:column;}.kadence-column7812_546522-a1 > .kt-inside-inner-col > .aligncenter{width:100%;}.kadence-column7812_546522-a1 > .kt-inside-inner-col:before{opacity:0.3;}.kadence-column7812_546522-a1{position:relative;}@media all and (max-width: 1024px){.kadence-column7812_546522-a1 > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}@media all and (max-width: 767px){.kadence-column7812_546522-a1 > .kt-inside-inner-col{flex-direction:column;justify-content:center;}}<\/style>\n<div class=\"wp-block-kadence-column kadence-column7812_546522-a1\"><div class=\"kt-inside-inner-col\"><style>.kt-post-loop7812_fedf91-83 .kadence-post-image{padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;}.kadence-post-image img{border-top-left-radius:8px;border-top-right-radius:8px;border-bottom-right-radius:8px;border-bottom-left-radius:8px;}.kt-post-loop7812_fedf91-83 .kt-post-grid-wrap{gap:30px 80px;}.kt-post-loop7812_fedf91-83 .kt-blocks-post-grid-item{border-top-left-radius:0px;border-top-right-radius:0px;border-bottom-right-radius:0px;border-bottom-left-radius:0px;overflow:hidden;}.kt-post-loop7812_fedf91-83 .kt-blocks-post-grid-item .kt-blocks-post-grid-item-inner{padding-top:1rem;padding-right:1.5rem;padding-bottom:1rem;padding-left:0rem;}.kt-post-loop7812_fedf91-83 .kt-blocks-post-grid-item header{padding-top:0px;padding-right:0px;padding-bottom:10px;padding-left:0px;margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;}.kt-post-loop7812_fedf91-83 .kt-blocks-post-grid-item .entry-title{color:var(--global-palette3, #1A202C);padding-top:10px;padding-right:0px;padding-bottom:5px;padding-left:0px;margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font-size:20px;line-height:30px;}.kt-post-loop7812_fedf91-83 .kt-blocks-post-grid-item .kt-blocks-post-top-meta{color:#777777;}.kt-post-loop7812_fedf91-83 .kt-blocks-post-grid-item .kt-blocks-post-top-meta a{color:#777777;}.kt-post-loop7812_fedf91-83 .kt-blocks-post-grid-item .kt-blocks-post-top-meta a:hover{color:#444444;}.kt-post-loop7812_fedf91-83 .entry-content{color:var(--global-palette5, #4A5568);padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;margin-top:0px;margin-right:0px;margin-bottom:0px;margin-left:0px;font-size:14px;}.kt-post-loop7812_fedf91-83 .kt-blocks-post-footer{color:var(--global-palette5, #4A5568);border-top-width:0px;border-right-width:0px;border-bottom-width:0px;border-left-width:0px;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;margin-top:20px;margin-right:0px;margin-bottom:0px;margin-left:0px;font-size:12px;}.kt-post-loop7812_fedf91-83 .entry-content:after{height:20px;}.kt-post-loop7812_fedf91-83 .kt-blocks-post-footer a{color:var(--global-palette5, #4A5568);}.kt-post-loop7812_fedf91-83 .kt-blocks-post-footer a:hover{color:var(--global-palette5, #4A5568);}.kt-post-loop7812_fedf91-83 .kb-filter-item{border-top-width:0px;border-right-width:0px;border-bottom-width:2px;border-left-width:0px;padding-top:5px;padding-right:8px;padding-bottom:5px;padding-left:8px;margin-top:0px;margin-right:10px;margin-bottom:0px;margin-left:0px;}.kt-post-loop7812_fedf91-83.kt-post-grid-layout-carousel .kb-post-grid-pause-button{color:#fff;background-color:rgba(0, 0, 0, 0.5);border:1px solid transparent;}<\/style><div class=\"wp-block-kadence-postgrid kt-blocks-post-loop-block alignnone kt-post-loop7812_fedf91-83 kt-post-grid-layout-carousel kadence-splide-wrap \"><div class=\"kt-post-grid-layout-carousel-wrap splide kt-carousel-arrowstyle-none kt-carousel-dotstyle-none kb-slider-group-arrow kb-slider-arrow-position-center\" data-columns-xxl=\"3\" data-columns-xl=\"3\" data-columns-md=\"3\" data-columns-sm=\"2\" data-columns-xs=\"1\" data-columns-ss=\"1\" data-slider-anim-speed=\"400\" data-slider-scroll=\"1\" data-slider-dots=\"false\" data-slider-arrows=\"false\" data-slider-hover-pause=\"false\" data-slider-auto=\"false\"  data-slider-auto-scroll=\"false\" data-slider-speed=\"7000\" data-slider-gap=\"80\" data-slider-gap-tablet=\"80\" data-slider-gap-mobile=\"80\" data-slider-gap-unit=\"px\" data-show-pause-button=\"false\" data-item-selector=\".kt-post-masonry-item\" aria-label=\"Post Carousel\"><div class=\"kadence-splide-slider-init splide__track\"><ul class=\"kadence-splide-slider-wrap kt-post-grid-wrap\" data-columns-xxl=\"3\" data-columns-xl=\"3\" data-columns-md=\"3\" data-columns-sm=\"2\" data-columns-xs=\"1\" data-columns-ss=\"1\"><li class=\"kt-post-slider-item post-7812 post type-post status-publish format-standard has-post-thumbnail hentry category-financial-sector category-knowledge-base category-manufacturing-industrial category-transport-logistics\"><article class=\"kt-blocks-post-grid-item\"><div class=\"kt-blocks-post-grid-item-inner-wrap kt-feat-image-align-top kt-feat-image-mobile-align-top kb-post-footer-bottom-align\"><div class=\"kadence-post-image\"><div class=\"kadence-post-image-intrisic kt-image-ratio-100\" style=\"padding-bottom:100%;\"><div class=\"kadence-post-image-inner-intrisic\"><a aria-hidden=\"true\" tabindex=\"-1\" role=\"presentation\" href=\"https:\/\/tenesys.io\/en\/blog\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\/\" aria-label=\"KSC 2026\u20132028 \u2013 who does the Act apply to, what needs to be implemented, and by when?\" class=\"kadence-post-image-inner-wrap\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"1024\" src=\"https:\/\/tenesys.io\/wp-content\/uploads\/2026\/05\/industrial_security-1024x1024.png\" class=\"attachment-large size-large wp-post-image\" alt=\"\" srcset=\"https:\/\/tenesys.io\/wp-content\/uploads\/2026\/05\/industrial_security-1024x1024.png 1024w, https:\/\/tenesys.io\/wp-content\/uploads\/2026\/05\/industrial_security-300x300.png 300w, https:\/\/tenesys.io\/wp-content\/uploads\/2026\/05\/industrial_security-150x150.png 150w, https:\/\/tenesys.io\/wp-content\/uploads\/2026\/05\/industrial_security-768x768.png 768w, https:\/\/tenesys.io\/wp-content\/uploads\/2026\/05\/industrial_security.png 1080w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/div><\/div><\/div><div class=\"kt-blocks-post-grid-item-inner\"><header><h3 class=\"entry-title\"><a href=\"https:\/\/tenesys.io\/en\/blog\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\/\">KSC 2026\u20132028 \u2013 who does the Act apply to, what needs to be implemented, and by when?<\/a><\/h3><div class=\"kt-blocks-post-top-meta\"><\/div><\/header><div class=\"entry-content\">The amendment to the Act on the National Cybersecurity System, which implements the NIS2 Directive, has been in force since 3 April 2026. For many companies and institutions, this means new obligations related to cybersecurity, incident reporting, audits, and management accountability. Before an organization starts planning KSC implementation, it should determine two things: whether it&#8230;<\/div><footer class=\"kt-blocks-post-footer\"><div class=\"kt-blocks-post-footer-left\"><div class=\"kt-blocks-date kt-blocks-post-footer-section\"><time dateTime=\"07 October 2026\" class=\"kt-blocks-post-date\">07 October 2026<\/time><\/div><div class=\"kt-blocks-categories kt-blocks-post-footer-section\"><span class=\"kt-blocks-tags-icon\"><svg version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"kt-blocks-cat-svg\" fill=\"currentColor\" width=\"32\" height=\"32\" viewBox=\"0 0 32 32\"><title>Categories<\/title>\n\t\t\t<path d=\"M0 10h32l-2 20h-28l-2-20zM29 6l1 2h-28l2-4h11l1 2h13z\"><\/path><\/svg><\/span><a href=\"https:\/\/tenesys.io\/en\/blog\/category\/financial-sector\/\" rel=\"category tag\">Financial Sector<\/a>, <a href=\"https:\/\/tenesys.io\/en\/blog\/category\/knowledge-base\/\" rel=\"category tag\">Knowledge Base<\/a>, <a href=\"https:\/\/tenesys.io\/en\/blog\/category\/manufacturing-industrial\/\" rel=\"category tag\">Manufacturing &amp; Industrial<\/a>, <a href=\"https:\/\/tenesys.io\/en\/blog\/category\/transport-logistics\/\" rel=\"category tag\">Transport &amp; Logistics<\/a><\/div><\/div><div class=\"kt-blocks-post-footer-right\"><\/div><\/footer><\/div><\/div><\/article><\/li><li class=\"kt-post-slider-item post-7817 post type-post status-publish format-standard has-post-thumbnail hentry category-knowledge-base category-manufacturing-industrial category-saas-isv category-transport-logistics\"><article class=\"kt-blocks-post-grid-item\"><div class=\"kt-blocks-post-grid-item-inner-wrap kt-feat-image-align-top kt-feat-image-mobile-align-top kb-post-footer-bottom-align\"><div class=\"kadence-post-image\"><div class=\"kadence-post-image-intrisic kt-image-ratio-100\" style=\"padding-bottom:100%;\"><div class=\"kadence-post-image-inner-intrisic\"><a aria-hidden=\"true\" tabindex=\"-1\" role=\"presentation\" href=\"https:\/\/tenesys.io\/en\/blog\/ksc-register-entry-by-october-3-2026-who-does-it-apply-to-and-how-should-you-prepare\/\" aria-label=\"KSC Register Entry by October 3, 2026. Who Does It Apply To and How Should You Prepare?\" class=\"kadence-post-image-inner-wrap\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"1024\" src=\"https:\/\/tenesys.io\/wp-content\/uploads\/2026\/05\/cloud_strategy_production-1024x1024.png\" class=\"attachment-large size-large wp-post-image\" alt=\"\" srcset=\"https:\/\/tenesys.io\/wp-content\/uploads\/2026\/05\/cloud_strategy_production-1024x1024.png 1024w, https:\/\/tenesys.io\/wp-content\/uploads\/2026\/05\/cloud_strategy_production-300x300.png 300w, https:\/\/tenesys.io\/wp-content\/uploads\/2026\/05\/cloud_strategy_production-150x150.png 150w, https:\/\/tenesys.io\/wp-content\/uploads\/2026\/05\/cloud_strategy_production-768x768.png 768w, https:\/\/tenesys.io\/wp-content\/uploads\/2026\/05\/cloud_strategy_production.png 1080w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/div><\/div><\/div><div class=\"kt-blocks-post-grid-item-inner\"><header><h3 class=\"entry-title\"><a href=\"https:\/\/tenesys.io\/en\/blog\/ksc-register-entry-by-october-3-2026-who-does-it-apply-to-and-how-should-you-prepare\/\">KSC Register Entry by October 3, 2026. Who Does It Apply To and How Should You Prepare?<\/a><\/h3><div class=\"kt-blocks-post-top-meta\"><\/div><\/header><div class=\"entry-content\">If an organization meets the criteria for an essential or important entity under the KSC Act, it is responsible for determining its status and registering in the KSC Register. For entities that met the statutory criteria on the date the new regulations came into force, the deadline for submitting an application is October 3, 2026&#8230;.<\/div><footer class=\"kt-blocks-post-footer\"><div class=\"kt-blocks-post-footer-left\"><div class=\"kt-blocks-date kt-blocks-post-footer-section\"><time dateTime=\"01 October 2026\" class=\"kt-blocks-post-date\">01 October 2026<\/time><\/div><div class=\"kt-blocks-categories kt-blocks-post-footer-section\"><span class=\"kt-blocks-tags-icon\"><svg version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"kt-blocks-cat-svg\" fill=\"currentColor\" width=\"32\" height=\"32\" viewBox=\"0 0 32 32\"><title>Categories<\/title>\n\t\t\t<path d=\"M0 10h32l-2 20h-28l-2-20zM29 6l1 2h-28l2-4h11l1 2h13z\"><\/path><\/svg><\/span><a href=\"https:\/\/tenesys.io\/en\/blog\/category\/knowledge-base\/\" rel=\"category tag\">Knowledge Base<\/a>, <a href=\"https:\/\/tenesys.io\/en\/blog\/category\/manufacturing-industrial\/\" rel=\"category tag\">Manufacturing &amp; Industrial<\/a>, <a href=\"https:\/\/tenesys.io\/en\/blog\/category\/saas-isv\/\" rel=\"category tag\">SaaS &amp; ISV<\/a>, <a href=\"https:\/\/tenesys.io\/en\/blog\/category\/transport-logistics\/\" rel=\"category tag\">Transport &amp; Logistics<\/a><\/div><\/div><div class=\"kt-blocks-post-footer-right\"><\/div><\/footer><\/div><\/div><\/article><\/li><li class=\"kt-post-slider-item post-7747 post type-post status-publish format-standard has-post-thumbnail hentry category-financial-sector\"><article class=\"kt-blocks-post-grid-item\"><div class=\"kt-blocks-post-grid-item-inner-wrap kt-feat-image-align-top kt-feat-image-mobile-align-top kb-post-footer-bottom-align\"><div class=\"kadence-post-image\"><div class=\"kadence-post-image-intrisic kt-image-ratio-100\" style=\"padding-bottom:100%;\"><div class=\"kadence-post-image-inner-intrisic\"><a aria-hidden=\"true\" tabindex=\"-1\" role=\"presentation\" href=\"https:\/\/tenesys.io\/en\/blog\/managing-cloud-saas-risk-for-small-fintechs-a-dora-survival-guide\/\" aria-label=\"Managing Cloud &amp; SaaS Risk for Small FinTechs: A DORA Survival Guide\" class=\"kadence-post-image-inner-wrap\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"1024\" src=\"https:\/\/tenesys.io\/wp-content\/uploads\/2026\/09\/managing-cloud-and-saas-risk-for-small-fintechs-a-dora-survival-guide-1024x1024.png\" class=\"attachment-large size-large wp-post-image\" alt=\"Managing Cloud &amp; SaaS Risk for Small FinTechs: A DORA Survival Guide\" srcset=\"https:\/\/tenesys.io\/wp-content\/uploads\/2026\/09\/managing-cloud-and-saas-risk-for-small-fintechs-a-dora-survival-guide-1024x1024.png 1024w, https:\/\/tenesys.io\/wp-content\/uploads\/2026\/09\/managing-cloud-and-saas-risk-for-small-fintechs-a-dora-survival-guide-300x300.png 300w, https:\/\/tenesys.io\/wp-content\/uploads\/2026\/09\/managing-cloud-and-saas-risk-for-small-fintechs-a-dora-survival-guide-150x150.png 150w, https:\/\/tenesys.io\/wp-content\/uploads\/2026\/09\/managing-cloud-and-saas-risk-for-small-fintechs-a-dora-survival-guide-768x768.png 768w, https:\/\/tenesys.io\/wp-content\/uploads\/2026\/09\/managing-cloud-and-saas-risk-for-small-fintechs-a-dora-survival-guide.png 1080w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/div><\/div><\/div><div class=\"kt-blocks-post-grid-item-inner\"><header><h3 class=\"entry-title\"><a href=\"https:\/\/tenesys.io\/en\/blog\/managing-cloud-saas-risk-for-small-fintechs-a-dora-survival-guide\/\">Managing Cloud &amp; SaaS Risk for Small FinTechs: A DORA Survival Guide<\/a><\/h3><div class=\"kt-blocks-post-top-meta\"><\/div><\/header><div class=\"entry-content\">Imagine a regulatory auditor walking into your office tomorrow. They do not just ask to see your signed vendor contracts. Instead, they demand real proof of how you monitor the security of every single SaaS platform your team uses daily. For small FinTechs, this scenario triggers immediate panic. The legal officer is drowning in technical&#8230;<\/div><footer class=\"kt-blocks-post-footer\"><div class=\"kt-blocks-post-footer-left\"><div class=\"kt-blocks-date kt-blocks-post-footer-section\"><time dateTime=\"23 September 2026\" class=\"kt-blocks-post-date\">23 September 2026<\/time><\/div><div class=\"kt-blocks-categories kt-blocks-post-footer-section\"><span class=\"kt-blocks-tags-icon\"><svg version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"kt-blocks-cat-svg\" fill=\"currentColor\" width=\"32\" height=\"32\" viewBox=\"0 0 32 32\"><title>Categories<\/title>\n\t\t\t<path d=\"M0 10h32l-2 20h-28l-2-20zM29 6l1 2h-28l2-4h11l1 2h13z\"><\/path><\/svg><\/span><a href=\"https:\/\/tenesys.io\/en\/blog\/category\/financial-sector\/\" rel=\"category tag\">Financial Sector<\/a><\/div><\/div><div class=\"kt-blocks-post-footer-right\"><\/div><\/footer><\/div><\/div><\/article><\/li><\/ul><\/div><\/div><\/div><!-- .wp-block-kadence-postgrid --><\/div><\/div>\n\n<\/div><\/div>","protected":false},"excerpt":{"rendered":"<p>The amendment to the Act on the National Cybersecurity System, which implements the NIS2 Directive, has been in force since 3 April 2026. For many companies and institutions, this means new obligations related to cybersecurity, incident reporting, audits, and management accountability. Before an organization starts planning KSC implementation, it should determine two things: whether it&#8230;<\/p>\n","protected":false},"author":10,"featured_media":6687,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_kad_blocks_custom_css":"","_kad_blocks_head_custom_js":"","_kad_blocks_body_custom_js":"","_kad_blocks_footer_custom_js":"","_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"categories":[107,1,106,95],"tags":[],"kategoria-uslugi-artykul":[],"class_list":["post-7812","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-financial-sector","category-knowledge-base","category-manufacturing-industrial","category-transport-logistics"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>KSC 2026\u20132028 \u2013 who does the Act apply to, and by when? - Tenesys<\/title>\n<meta name=\"description\" content=\"Before an organization starts planning KSC implementation, it should determine whether it is subject to the Act and what status it has!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/tenesys.io\/en\/blog\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"KSC 2026\u20132028 \u2013 who does the Act apply to, and by when? - Tenesys\" \/>\n<meta property=\"og:description\" content=\"Before an organization starts planning KSC implementation, it should determine whether it is subject to the Act and what status it has!\" \/>\n<meta property=\"og:url\" content=\"https:\/\/tenesys.io\/en\/blog\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\/\" \/>\n<meta property=\"og:site_name\" content=\"Tenesys\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/tenesyspl\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-07T10:14:47+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-07T10:23:37+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/tenesys.io\/wp-content\/uploads\/2026\/05\/industrial_security.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1080\" \/>\n\t<meta property=\"og:image:height\" content=\"1080\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"\u0141ukasz Ratajczyk\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\u0141ukasz Ratajczyk\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/tenesys.io\\\/en\\\/blog\\\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/tenesys.io\\\/en\\\/blog\\\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\\\/\"},\"author\":{\"name\":\"\u0141ukasz Ratajczyk\",\"@id\":\"https:\\\/\\\/tenesys.io\\\/en\\\/#\\\/schema\\\/person\\\/8d2ddd8eb51eded8658b930edde73f1c\"},\"headline\":\"KSC 2026\u20132028 \u2013 who does the Act apply to, what needs to be implemented, and by when?\",\"datePublished\":\"2026-10-07T10:14:47+00:00\",\"dateModified\":\"2026-10-07T10:23:37+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/tenesys.io\\\/en\\\/blog\\\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\\\/\"},\"wordCount\":1692,\"publisher\":{\"@id\":\"https:\\\/\\\/tenesys.io\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/tenesys.io\\\/en\\\/blog\\\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/tenesys.io\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/industrial_security.png\",\"articleSection\":[\"Financial Sector\",\"Knowledge Base\",\"Manufacturing &amp; Industrial\",\"Transport &amp; Logistics\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/tenesys.io\\\/en\\\/blog\\\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\\\/\",\"url\":\"https:\\\/\\\/tenesys.io\\\/en\\\/blog\\\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\\\/\",\"name\":\"KSC 2026\u20132028 \u2013 who does the Act apply to, and by when? - Tenesys\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/tenesys.io\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/tenesys.io\\\/en\\\/blog\\\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/tenesys.io\\\/en\\\/blog\\\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/tenesys.io\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/industrial_security.png\",\"datePublished\":\"2026-10-07T10:14:47+00:00\",\"dateModified\":\"2026-10-07T10:23:37+00:00\",\"description\":\"Before an organization starts planning KSC implementation, it should determine whether it is subject to the Act and what status it has!\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/tenesys.io\\\/en\\\/blog\\\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/tenesys.io\\\/en\\\/blog\\\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/tenesys.io\\\/en\\\/blog\\\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\\\/#primaryimage\",\"url\":\"https:\\\/\\\/tenesys.io\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/industrial_security.png\",\"contentUrl\":\"https:\\\/\\\/tenesys.io\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/industrial_security.png\",\"width\":1080,\"height\":1080},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/tenesys.io\\\/en\\\/blog\\\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Strona g\u0142\u00f3wna\",\"item\":\"https:\\\/\\\/tenesys.io\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Financial Sector\",\"item\":\"https:\\\/\\\/tenesys.io\\\/en\\\/blog\\\/category\\\/financial-sector\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"KSC 2026\u20132028 \u2013 who does the Act apply to, what needs to be implemented, and by when?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/tenesys.io\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/tenesys.io\\\/en\\\/\",\"name\":\"Tenesys\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/tenesys.io\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/tenesys.io\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Organization\",\"ProfessionalService\"],\"@id\":\"https:\\\/\\\/tenesys.io\\\/en\\\/#organization\",\"name\":\"Tenesys\",\"url\":\"https:\\\/\\\/tenesys.io\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/tenesys.io\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/tenesys.io\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/post-cover_blog.png\",\"contentUrl\":\"https:\\\/\\\/tenesys.io\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/post-cover_blog.png\",\"width\":1080,\"height\":1080,\"caption\":\"Tenesys\"},\"image\":{\"@id\":\"https:\\\/\\\/tenesys.io\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/tenesyspl\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/tenesys-io\",\"https:\\\/\\\/clutch.co\\\/profile\\\/tenesys\",\"https:\\\/\\\/itcorner.org.pl\\\/firmy\\\/tenesys\\\/\"],\"legalName\":\"Tenesys\",\"foundingDate\":\"2015\",\"slogan\":\"Zmieniamy z\u0142o\u017cono\u015b\u0107 w przewidywalno\u015b\u0107\",\"description\":\"Partner technologiczny \u0142\u0105cz\u0105cy zarz\u0105dzanie infrastruktur\u0105 IT, cyberbezpiecze\u0144stwo i compliance w jeden system zarz\u0105dzanych us\u0142ug (Managed Services).\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"minValue\":30},\"vatID\":\"PL9721255120\",\"taxID\":\"361495163\",\"address\":{\"@type\":\"PostalAddress\",\"streetAddress\":\"ul. Wroniecka 18\\\/5\",\"addressLocality\":\"Pozna\u0144\",\"postalCode\":\"61-763\",\"addressCountry\":\"PL\"},\"contactPoint\":[{\"@type\":\"ContactPoint\",\"telephone\":\"+48616661140\",\"contactType\":\"sales\",\"areaServed\":[\"PL\",\"EU\"],\"availableLanguage\":[\"pl\",\"en\"]}],\"areaServed\":[\"PL\",\"EU\"],\"knowsAbout\":[\"Cloud computing\",\"AWS\",\"Microsoft Azure\",\"Google Cloud\",\"OVHcloud\",\"Kubernetes\",\"DevOps\",\"DevSecOps\",\"Infrastructure as Code\",\"Terraform\",\"Cyberbezpiecze\u0144stwo\",\"Security Operations Center\",\"Disaster Recovery\",\"Zgodno\u015b\u0107 NIS2\",\"DORA\",\"Krajowy System Cyberbezpiecze\u0144stwa (KSC)\",\"Managed Services\",\"FinOps\",\"Migracja do chmury\",\"Observability\"],\"hasCredential\":[{\"@type\":\"EducationalOccupationalCredential\",\"credentialCategory\":\"AWS Advanced Tier Services Partner\"},{\"@type\":\"EducationalOccupationalCredential\",\"credentialCategory\":\"Microsoft Partner\"},{\"@type\":\"EducationalOccupationalCredential\",\"credentialCategory\":\"Google Cloud Partner\"},{\"@type\":\"EducationalOccupationalCredential\",\"credentialCategory\":\"OVHcloud Advanced Partner\"},{\"@type\":\"EducationalOccupationalCredential\",\"credentialCategory\":\"Sophos Partner\"},{\"@type\":\"EducationalOccupationalCredential\",\"credentialCategory\":\"Bitdefender Partner\"}]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/tenesys.io\\\/en\\\/#\\\/schema\\\/person\\\/8d2ddd8eb51eded8658b930edde73f1c\",\"name\":\"\u0141ukasz Ratajczyk\",\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/tenesys.io\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/TENESYS-1-JPEGmini-2600px-scaled.jpg\",\"contentUrl\":\"https:\\\/\\\/tenesys.io\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/TENESYS-1-JPEGmini-2600px-scaled.jpg\",\"caption\":\"\u0141ukasz Ratajczyk\"},\"jobTitle\":\"CTO\",\"description\":\"CTO z 12-letnim do\u015bwiadczeniem w r\u00f3\u017cnych bran\u017cach. Specjalizuje si\u0119 w optymalizacji \u015brodowisk chmurowych i modernizacji infrastruktury. Certyfikowany architekt chmury, w Tenesys kieruje zespo\u0142em do\u015bwiadczonych in\u017cynier\u00f3w DevOps. Prywatnie podr\u00f3\u017cnik i rowerzysta g\u00f3rski.\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/lukaszratajczyk\\\/\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/tenesys.io\\\/#organization\"},\"url\":\"https:\\\/\\\/tenesys.io\\\/blog\\\/author\\\/lukasz-ratajczyk\\\/\",\"knowsAbout\":[\"Cloud architecture\",\"DevOps\",\"Infrastructure modernization\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"KSC 2026\u20132028 \u2013 who does the Act apply to, and by when? - Tenesys","description":"Before an organization starts planning KSC implementation, it should determine whether it is subject to the Act and what status it has!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/tenesys.io\/en\/blog\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\/","og_locale":"en_US","og_type":"article","og_title":"KSC 2026\u20132028 \u2013 who does the Act apply to, and by when? - Tenesys","og_description":"Before an organization starts planning KSC implementation, it should determine whether it is subject to the Act and what status it has!","og_url":"https:\/\/tenesys.io\/en\/blog\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\/","og_site_name":"Tenesys","article_publisher":"https:\/\/www.facebook.com\/tenesyspl\/","article_published_time":"2026-10-07T10:14:47+00:00","article_modified_time":"2026-10-07T10:23:37+00:00","og_image":[{"width":1080,"height":1080,"url":"https:\/\/tenesys.io\/wp-content\/uploads\/2026\/05\/industrial_security.png","type":"image\/png"}],"author":"\u0141ukasz Ratajczyk","twitter_card":"summary_large_image","twitter_misc":{"Written by":"\u0141ukasz Ratajczyk","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/tenesys.io\/en\/blog\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\/#article","isPartOf":{"@id":"https:\/\/tenesys.io\/en\/blog\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\/"},"author":{"name":"\u0141ukasz Ratajczyk","@id":"https:\/\/tenesys.io\/en\/#\/schema\/person\/8d2ddd8eb51eded8658b930edde73f1c"},"headline":"KSC 2026\u20132028 \u2013 who does the Act apply to, what needs to be implemented, and by when?","datePublished":"2026-10-07T10:14:47+00:00","dateModified":"2026-10-07T10:23:37+00:00","mainEntityOfPage":{"@id":"https:\/\/tenesys.io\/en\/blog\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\/"},"wordCount":1692,"publisher":{"@id":"https:\/\/tenesys.io\/en\/#organization"},"image":{"@id":"https:\/\/tenesys.io\/en\/blog\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\/#primaryimage"},"thumbnailUrl":"https:\/\/tenesys.io\/wp-content\/uploads\/2026\/05\/industrial_security.png","articleSection":["Financial Sector","Knowledge Base","Manufacturing &amp; Industrial","Transport &amp; Logistics"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/tenesys.io\/en\/blog\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\/","url":"https:\/\/tenesys.io\/en\/blog\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\/","name":"KSC 2026\u20132028 \u2013 who does the Act apply to, and by when? - Tenesys","isPartOf":{"@id":"https:\/\/tenesys.io\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/tenesys.io\/en\/blog\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\/#primaryimage"},"image":{"@id":"https:\/\/tenesys.io\/en\/blog\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\/#primaryimage"},"thumbnailUrl":"https:\/\/tenesys.io\/wp-content\/uploads\/2026\/05\/industrial_security.png","datePublished":"2026-10-07T10:14:47+00:00","dateModified":"2026-10-07T10:23:37+00:00","description":"Before an organization starts planning KSC implementation, it should determine whether it is subject to the Act and what status it has!","breadcrumb":{"@id":"https:\/\/tenesys.io\/en\/blog\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/tenesys.io\/en\/blog\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/tenesys.io\/en\/blog\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\/#primaryimage","url":"https:\/\/tenesys.io\/wp-content\/uploads\/2026\/05\/industrial_security.png","contentUrl":"https:\/\/tenesys.io\/wp-content\/uploads\/2026\/05\/industrial_security.png","width":1080,"height":1080},{"@type":"BreadcrumbList","@id":"https:\/\/tenesys.io\/en\/blog\/ksc-2026-2028-who-does-the-act-apply-to-what-needs-to-be-implemented-and-by-when\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Strona g\u0142\u00f3wna","item":"https:\/\/tenesys.io\/en\/"},{"@type":"ListItem","position":2,"name":"Financial Sector","item":"https:\/\/tenesys.io\/en\/blog\/category\/financial-sector\/"},{"@type":"ListItem","position":3,"name":"KSC 2026\u20132028 \u2013 who does the Act apply to, what needs to be implemented, and by when?"}]},{"@type":"WebSite","@id":"https:\/\/tenesys.io\/en\/#website","url":"https:\/\/tenesys.io\/en\/","name":"Tenesys","description":"","publisher":{"@id":"https:\/\/tenesys.io\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/tenesys.io\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Organization","ProfessionalService"],"@id":"https:\/\/tenesys.io\/en\/#organization","name":"Tenesys","url":"https:\/\/tenesys.io\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/tenesys.io\/en\/#\/schema\/logo\/image\/","url":"https:\/\/tenesys.io\/wp-content\/uploads\/2026\/06\/post-cover_blog.png","contentUrl":"https:\/\/tenesys.io\/wp-content\/uploads\/2026\/06\/post-cover_blog.png","width":1080,"height":1080,"caption":"Tenesys"},"image":{"@id":"https:\/\/tenesys.io\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/tenesyspl\/","https:\/\/www.linkedin.com\/company\/tenesys-io","https:\/\/clutch.co\/profile\/tenesys","https:\/\/itcorner.org.pl\/firmy\/tenesys\/"],"legalName":"Tenesys","foundingDate":"2015","slogan":"Zmieniamy z\u0142o\u017cono\u015b\u0107 w przewidywalno\u015b\u0107","description":"Partner technologiczny \u0142\u0105cz\u0105cy zarz\u0105dzanie infrastruktur\u0105 IT, cyberbezpiecze\u0144stwo i compliance w jeden system zarz\u0105dzanych us\u0142ug (Managed Services).","numberOfEmployees":{"@type":"QuantitativeValue","minValue":30},"vatID":"PL9721255120","taxID":"361495163","address":{"@type":"PostalAddress","streetAddress":"ul. Wroniecka 18\/5","addressLocality":"Pozna\u0144","postalCode":"61-763","addressCountry":"PL"},"contactPoint":[{"@type":"ContactPoint","telephone":"+48616661140","contactType":"sales","areaServed":["PL","EU"],"availableLanguage":["pl","en"]}],"areaServed":["PL","EU"],"knowsAbout":["Cloud computing","AWS","Microsoft Azure","Google Cloud","OVHcloud","Kubernetes","DevOps","DevSecOps","Infrastructure as Code","Terraform","Cyberbezpiecze\u0144stwo","Security Operations Center","Disaster Recovery","Zgodno\u015b\u0107 NIS2","DORA","Krajowy System Cyberbezpiecze\u0144stwa (KSC)","Managed Services","FinOps","Migracja do chmury","Observability"],"hasCredential":[{"@type":"EducationalOccupationalCredential","credentialCategory":"AWS Advanced Tier Services Partner"},{"@type":"EducationalOccupationalCredential","credentialCategory":"Microsoft Partner"},{"@type":"EducationalOccupationalCredential","credentialCategory":"Google Cloud Partner"},{"@type":"EducationalOccupationalCredential","credentialCategory":"OVHcloud Advanced Partner"},{"@type":"EducationalOccupationalCredential","credentialCategory":"Sophos Partner"},{"@type":"EducationalOccupationalCredential","credentialCategory":"Bitdefender Partner"}]},{"@type":"Person","@id":"https:\/\/tenesys.io\/en\/#\/schema\/person\/8d2ddd8eb51eded8658b930edde73f1c","name":"\u0141ukasz Ratajczyk","image":{"@type":"ImageObject","url":"https:\/\/tenesys.io\/wp-content\/uploads\/2026\/04\/TENESYS-1-JPEGmini-2600px-scaled.jpg","contentUrl":"https:\/\/tenesys.io\/wp-content\/uploads\/2026\/04\/TENESYS-1-JPEGmini-2600px-scaled.jpg","caption":"\u0141ukasz Ratajczyk"},"jobTitle":"CTO","description":"CTO z 12-letnim do\u015bwiadczeniem w r\u00f3\u017cnych bran\u017cach. Specjalizuje si\u0119 w optymalizacji \u015brodowisk chmurowych i modernizacji infrastruktury. Certyfikowany architekt chmury, w Tenesys kieruje zespo\u0142em do\u015bwiadczonych in\u017cynier\u00f3w DevOps. Prywatnie podr\u00f3\u017cnik i rowerzysta g\u00f3rski.","sameAs":["https:\/\/www.linkedin.com\/in\/lukaszratajczyk\/"],"worksFor":{"@id":"https:\/\/tenesys.io\/#organization"},"url":"https:\/\/tenesys.io\/blog\/author\/lukasz-ratajczyk\/","knowsAbout":["Cloud architecture","DevOps","Infrastructure modernization"]}]}},"taxonomy_info":{"category":[{"value":107,"label":"Financial Sector"},{"value":1,"label":"Knowledge Base"},{"value":106,"label":"Manufacturing &amp; Industrial"},{"value":95,"label":"Transport &amp; Logistics"}]},"featured_image_src_large":["https:\/\/tenesys.io\/wp-content\/uploads\/2026\/05\/industrial_security-1024x1024.png",1024,1024,true],"author_info":{"display_name":"\u0141ukasz Ratajczyk","author_link":"https:\/\/tenesys.io\/en\/blog\/author\/lukasz-ratajczyk\/"},"comment_info":0,"category_info":[{"term_id":107,"name":"Financial Sector","slug":"financial-sector","term_group":0,"term_taxonomy_id":107,"taxonomy":"category","description":"","parent":0,"count":28,"filter":"raw","cat_ID":107,"category_count":28,"category_description":"","cat_name":"Financial Sector","category_nicename":"financial-sector","category_parent":0},{"term_id":1,"name":"Knowledge Base","slug":"knowledge-base","term_group":0,"term_taxonomy_id":1,"taxonomy":"category","description":"","parent":0,"count":12,"filter":"raw","cat_ID":1,"category_count":12,"category_description":"","cat_name":"Knowledge Base","category_nicename":"knowledge-base","category_parent":0},{"term_id":106,"name":"Manufacturing &amp; Industrial","slug":"manufacturing-industrial","term_group":0,"term_taxonomy_id":106,"taxonomy":"category","description":"","parent":0,"count":33,"filter":"raw","cat_ID":106,"category_count":33,"category_description":"","cat_name":"Manufacturing &amp; Industrial","category_nicename":"manufacturing-industrial","category_parent":0},{"term_id":95,"name":"Transport &amp; Logistics","slug":"transport-logistics","term_group":0,"term_taxonomy_id":95,"taxonomy":"category","description":"","parent":0,"count":22,"filter":"raw","cat_ID":95,"category_count":22,"category_description":"","cat_name":"Transport &amp; Logistics","category_nicename":"transport-logistics","category_parent":0}],"tag_info":false,"_links":{"self":[{"href":"https:\/\/tenesys.io\/en\/wp-json\/wp\/v2\/posts\/7812","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tenesys.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tenesys.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tenesys.io\/en\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/tenesys.io\/en\/wp-json\/wp\/v2\/comments?post=7812"}],"version-history":[{"count":1,"href":"https:\/\/tenesys.io\/en\/wp-json\/wp\/v2\/posts\/7812\/revisions"}],"predecessor-version":[{"id":7813,"href":"https:\/\/tenesys.io\/en\/wp-json\/wp\/v2\/posts\/7812\/revisions\/7813"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tenesys.io\/en\/wp-json\/wp\/v2\/media\/6687"}],"wp:attachment":[{"href":"https:\/\/tenesys.io\/en\/wp-json\/wp\/v2\/media?parent=7812"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tenesys.io\/en\/wp-json\/wp\/v2\/categories?post=7812"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tenesys.io\/en\/wp-json\/wp\/v2\/tags?post=7812"},{"taxonomy":"kategoria-uslugi-artykul","embeddable":true,"href":"https:\/\/tenesys.io\/en\/wp-json\/wp\/v2\/kategoria-uslugi-artykul?post=7812"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}