Calculator · Cybersecurity Act / 264/2025
A step-by-step guide — organisation type, size, sector, service — that tells you whether you are regulated and under which regime.
We will work through your organisation type, size (under the definition of small and medium-sized enterprises), sector and the specific service. At the end you will see your regime of obligations and what to do next.
The calculator covers all 15 sectors under Act No. 264/2025 Coll. The size criteria follow Commission Recommendation 2003/361/EC — the same basis as the official NÚKIB calculator (Czech only).
Pick the matching band in each column. Size is determined by headcount AND by the financial figures at the same time (the more favourable of turnover / balance sheet total applies).
For a definitive determination of your status we recommend the official NÚKIB calculator or a consultation.
Size is calculated under Commission Recommendation 2003/361/EC and the User Guide to the SME Definition. The calculator does not account for partner and linked enterprises — if you are part of a group, follow the Commission recommendation.
If your sector is not listed or you are unsure, we recommend the official NÚKIB calculator (in Czech).
CypherOn provides cybersecurity consulting services and is not a law firm. For legal opinions, turn to an attorney registered with the Czech Bar Association.
Frequently asked questions about the new Czech Cybersecurity Act — who it applies to, deadlines, penalties, the cybersecurity manager role, incident reporting.
Open the FAQA plain-language guide to Act No. 264/2025 Coll. — who, what, when and how. Structured and readable, without the statutory wording.
Open the guideEven if the Act misses you, cybersecurity does not. A minimum security standard, CIS Controls IG1 and practical basics for small companies.
Recommended minimumWant to go further?
Not sure about the result? In a 30-minute consultation we will check how your organisation is classified and propose the next steps. If you already know the duties apply to you, take a look at what a gap analysis looks like and what follows it.