CYBER SECURITY · NIS2

Cyber Resilience

We set up zero-trust access, segment your network, run scheduled test restores, write the incident response plan and map your NIS2 gaps, so your systems come back within a known, agreed time.

Talk to an expert

VIXEN.UNO ENGINEERING TEAM

12 engineers holding current VCP and 4 holding VCAP

WHAT YOU GET

After the project you have:

✓A segmented network and zero-trust access

✓Backups that actually restore, with scheduled tests

✓An incident response plan, with roles, actions and deadlines

✓A NIS2 compliance map with the gaps listed and a plan to close them

The compliance map is a technical assessment. The legal opinion on compliance is prepared by your legal department.

TECHNOLOGY PARTNERS OF THE VIXEN.UNO ENGINEERING TEAM

WHAT WE SEE IN THE FIELD

Which of these sounds familiar?

▲

NIS2 is already here

National laws are already in force, and responsibility for cyber risk now sits personally with management.

✱︎

Ransomware stops the business

An attack encrypts processes, not just files: production, logistics, sales. The question is not “if” but “how fast you recover”.

≣

Backups without restore tests

Everyone makes backups. But without regular test restores nobody knows whether the systems will come back up, or how long it will take.

◎

The perimeter is gone

Clouds, remote work, contractors with access, while access control stayed the way it was five years ago.

THE SOLUTION

What the solution includes

Security and compliance assessment

An audit of your security posture: infrastructure, access, backups, compliance with NIS2 requirements. You get a risk map and a prioritised action plan.

Zero-trust architecture and access control

An architecture following NIST CSF 2.0: network segmentation, multi-factor authentication, privileged access management, mobile device management (MDM) and data loss prevention (DLP).

Perimeter protection and threat detection

Firewalls, intrusion prevention (IPS), email and web traffic filtering, EDR/XDR on workstations and servers, event centralisation in a SIEM, on Trend Micro, Cisco and other vendors’ solutions.

Backup and DRaaS in the EU

Veeam-based backup and a recovery site in Baltneta’s Tier-3 data centres in Lithuania. Capacity availability, support terms and target RPO and RTO are fixed in the SLA.

Scheduled restores and a response plan

Regular test restores to verify backup integrity, incident response scenarios, roles, communication and regulatory reporting deadlines, so that on day X the team follows a plan instead of improvising.

Who delivers

One contract. Clear responsibilities.

You sign one contract and work with one project lead. Here is who is responsible for what.

Eurokommerz

AUSTRIA · EU

An Austrian company with 20+ years in the market. Holds the contract and supplies the hardware under the solution – with EU invoicing, delivery and warranty under European law. A single point of responsibility for the project.

Vixen.UNO – engineering partner

UKRAINE · INTERNATIONAL PROJECTS SINCE 2018

Security and infrastructure engineering: zero-trust architectures, backup and recovery, SIEM. 12 engineers hold current VCP and 4 hold VCAP.

Trend Micro AuthorizedCisco PartnerVeeam Authorized

EU hosting: Vixen.UNO’s data-centre partner is Baltneta (Lithuania, since 1996, part of Atea group) – its own Tier-3 data centres, ISO 27001, PCI DSS Level 1, EU data residency. balt.net ↗

More about Vixen.UNO ↗

How we work

Three transparent steps

01free of charge

Talk to an expert

We work through your situation and infrastructure; you leave with 2–3 possible solution scenarios.

02paid stage

Technical assessment

A review of security and backup: risk map, compliance analysis, prioritised action plan. The price is fixed before work begins.

Implementation and support

Delivered step by step, without stopping the business. Ongoing support under an agreed SLA.

HONESTLY

When we are not the right fit

✕If you only need a document for the auditor, without changes to the infrastructure: we do not issue compliance certificates.

✕If you expect a full resilience programme to be designed and implemented within two weeks. An active incident or a hard deadline is different: write to us straight away, that is a separate mode of work.

FAQ

The key questions, answered

Does NIS2 apply to us?

If you are a medium or large company in a critical or important EU sector (energy, transport, manufacturing, finance, digital services), most likely yes. And even if not: the requirements increasingly arrive from your customers, because NIS2 covers the supply chain too. On the free consultation we will look at your specific case.

We already have backups and antivirus. Is that not enough?

It is the foundation. The real question is different: have you verified that systems actually come back up from those backups, and how long it takes. The assessment shows where the gaps are between “backups are running” and “the business recovers”, and what to close first.

What happens to the company’s work during implementation?

Changes are rolled out step by step, in agreed maintenance windows, with a rollback plan; the business keeps running.

Will you support an environment you did not build?

Yes. We start with a technical assessment of its state, then support under an SLA. Who built the environment before, and how, is not an obstacle.

We are a financial institution. What about DORA?

DORA has applied since January 2025 to financial entities and their critical IT providers. If that is your case, we include DORA requirements in the assessment and the work plan.

How do you handle our data during the project?

Engineers work in your environment under your access controls; we do not take copies of production data out of it. NDA before technical detail, a data processing agreement on request, subprocessors named in the contract. The full picture (data access, the documents we sign and where hosting runs) is on the Security & Compliance page.

Who is the contract with, and who is responsible for the result?

The contract is with Eurokommerz (Austria). The engineering work is delivered by the team of our partner Vixen.UNO. A dedicated Eurokommerz project lead stays your single point of contact: questions do not move between contractors.

RELATED DEEP DIVE

From our engineering blog

GUIDE

RPO vs RTO: the difference and how to set them

Why cost climbs steeply near zero, how to tier systems, and the dependency order that breaks untested plans.

Read the article →

GUIDE

Where the waste is in a vSphere estate

Forgotten snapshots are the most common avoidable cause of a storage outage we see. Where they hide and how to find them.

Read the article →

Let’s talk about your project

We reply within one business day