SUCCESS STORY: COMPLIANCE IMPROVED BY MORE THAN 200%

AS THE INSTITUTE OF KNOWLEDGE AGRICULTURE AND INNOVATION (IZPI), WE ARE A SLOVAK STATE ORGANIZATION AND AN OPERATOR OF A CRITICAL ESSENTIAL SERVICE.

During our most recent cybersecurity audit, we achieved an improvement in compliance with the requirements of the Slovak Cybersecurity Act of more than 200%, representing an increase of more than 50 percentage points compared with the previous audit.

Several measures contributed to this result, most notably the implementation of the Tazilla platform, which we used to support cybersecurity management and audit preparation, as well as the implementation of a SIEM solution and Microsoft 365.

SITUATION BEFORE IMPLEMENTING TAZILLA

Before implementing Tazilla, our approach to cybersecurity management and audit preparation was largely manual and unsystematic. Areas such as business continuity management, event records, documentation and risk management were not centralized in one place.

USING THE TAZILLA PLATFORM

Wir begannen im März mit der Nutzung der Plattform. Das Audit nach dem slowakischen Cybersicherheitsgesetz fand anschließend von April bis Juni statt.

We saw the greatest value of the platform in the following areas:

• risk analysis and risk management,
• business continuity management,
• logging and managing cybersecurity events,
• creating and managing documentation,
• using policy templates that we could subsequently adapt to our own needs.

SUMMARY

Tazilla helped us bring greater structure, transparency and consistency to our cybersecurity processes. The risk management and business continuity modules, together with the policy templates that we were able to adapt to our own needs, were particularly valuable.

By centralizing information, we had all the necessary audit materials available in one place and were able to demonstrate compliance with regulatory requirements more easily and efficiently.

In the future, we also plan to use the training module, potentially third-party risk analysis, as well as selected technical security capabilities, such as an internal vulnerability scanner.