CYBER SECURITY · NIS2

Cyber Resilience

We set up zero-trust access, segment your network, run scheduled test restores, write the incident response plan and map your NIS2 gaps, so your systems come back within a known, agreed time.

Talk to an expert
VIXEN.UNO · VENDOR-CERTIFIED ENGINEERING TEAM
WHAT YOU GET
After the project you have:
✓A segmented network and zero-trust access
✓Backups that actually restore, with scheduled tests
✓An incident response plan, with roles, actions and deadlines
✓A NIS2 compliance map with the gaps listed and a plan to close them

The compliance map is a technical assessment. The legal opinion on compliance is prepared by your legal department.

TECHNOLOGY PARTNERS OF THE VIXEN.UNO ENGINEERING TEAM
VMware by Broadcom
Broadcom
Veeam
Trend Micro
Cisco
WHAT WE SEE IN THE FIELD

Which of these sounds familiar?

NIS2 is already here
National laws are already in force, and responsibility for cyber risk now sits personally with management.
Ransomware stops the business
An attack encrypts processes, not just files: production, logistics, sales. The question is not “if” but “how fast you recover”.
Backups without restore tests
Everyone makes backups. But without regular test restores nobody knows whether the systems will come back up, or how long it will take.
The perimeter is gone
Clouds, remote work, contractors with access, while access control stayed the way it was five years ago.
THE SOLUTION

What the solution includes

Security and compliance assessment

An audit of your security posture: infrastructure, access, backups, compliance with NIS2 requirements. You get a risk map and a prioritised action plan.

Zero-trust architecture and access control

An architecture following NIST CSF 2.0: network segmentation, multi-factor authentication, privileged access management, mobile device management (MDM) and data loss prevention (DLP).

Perimeter protection and threat detection

Firewalls, intrusion prevention (IPS), email and web traffic filtering, EDR/XDR on workstations and servers, event centralisation in a SIEM, on Trend Micro, Cisco and other vendors’ solutions.

Backup and DRaaS in the EU

Veeam-based backup and a recovery site in Baltneta’s Tier III data centres in Lithuania. Capacity availability, support terms and target RPO and RTO are fixed in the SLA.

Scheduled restores and a response plan

Regular test restores to verify backup integrity, incident response scenarios, roles, communication and regulatory reporting deadlines, so that when an incident hits, the team follows a plan instead of improvising.

Who delivers

One contract. Clear responsibilities.

You sign one contract and work with one project lead. Here is who is responsible for what.

Eurokommerz
AUSTRIA · EU

An Austrian company with 20+ years in the market. Holds the contract and supplies the hardware under the solution, with EU invoicing, delivery and warranty under European law. A single point of responsibility for the project.

Vixen.UNO: engineering partner
UKRAINE · INTERNATIONAL PROJECTS SINCE 2018

Security and infrastructure engineering: zero-trust architectures, backup and recovery, SIEM.

Trend Micro AuthorizedCisco PartnerVeeam Authorized

EU hosting: Vixen.UNO’s data-centre partner is Baltneta (Lithuania, since 1996, part of Atea group): its own Tier III data centres, ISO 27001, PCI DSS Level 1, EU data residency. balt.net ↗

More about Vixen.UNO ↗
How we work

Three transparent steps

01free of charge

Talk to an expert
We work through your situation and infrastructure; you leave with 2 to 3 possible solution scenarios.

02paid stage

Technical assessment
A review of security and backup: risk map, compliance analysis, prioritised action plan. The price is fixed before work begins.

03

Implementation and support
Delivered step by step. Ongoing support under an agreed SLA.
Talk to an expert
HONESTLY

When we are not the right fit

✕If you only need a document for the auditor, without changes to the infrastructure: we do not issue compliance certificates.
✕If you expect a full resilience programme to be designed and implemented within two weeks. An active incident or a hard deadline is different: write to us straight away and we will handle it separately.
FAQ

The key questions, answered

Does NIS2 apply to us?
NIS2 applies to companies of a type listed in its Annexes I and II, such as energy, transport, health, digital infrastructure, managed IT services, manufacturing and digital providers, that are at least medium-sized under EU Recommendation 2003/361/EC: 50 or more staff, or an annual turnover and a balance sheet total both above EUR 10 million. Some entities are covered regardless of size, for example DNS and trust service providers. The obligations themselves come from the national law with which each EU country transposes the directive. Outside that scope the requirements often arrive through contracts, because covered customers must manage the security of their supply chain (Article 21(2)(d)). In the free consultation we go through these criteria with you.
We already have backups and antivirus. Is that not enough?
It is the foundation. The real question is different: have you verified that systems actually come back up from those backups, and how long it takes. The assessment shows where the gaps are between “backups are running” and “the business recovers”, and what to close first.
What happens to the company’s work during implementation?
Changes are rolled out step by step, in agreed maintenance windows, with a rollback plan; the business keeps running.
Will you support an environment you did not build?
Yes. We start with a technical assessment of its state, then support under an SLA. Who built the environment before, and how, is not an obstacle.
We are a financial institution. What about DORA?
DORA has applied since January 2025 to financial entities and their critical IT providers. If that is your case, we include DORA requirements in the assessment and the work plan.
How do you handle our data during the project?
Engineers work in your environment under your access controls; we do not take copies of production data out of it. NDA before technical detail, a data processing agreement on request, subprocessors named in the contract. The full picture (data access, the documents we sign and where hosting runs) is on the Security & Compliance page.
Who is the contract with, and who is responsible for the result?
The contract is with Eurokommerz (Austria). The engineering work is delivered by the team of our partner Vixen.UNO. A dedicated Eurokommerz project lead stays your single point of contact: questions do not move between contractors.
RELATED DEEP DIVE

From our engineering blog

GUIDE
RPO vs RTO: the difference and how to set them

Why cost rises steeply near zero, how to tier the systems, and what the RTO includes besides the restore.

Read the article →
GUIDE
Where the waste is in a vSphere estate

Forgotten snapshots are the most common avoidable cause of a storage outage we see. Where they hide and how to find them.

Read the article →

Let’s talk about your project

We reply within one business day

By sending this form you agree that we process your details to answer your enquiry; see our privacy policy.

request@eurokommerz.at
Jordangasse 7, 1010 Vienna