Are you dealing with adjusting contractual relationships with suppliers according to the new Cybersecurity Act? If not yet, now is the perfect time to open this topic.
Practically and without unnecessary theory – the differences between the lower and higher regimes and the role of major suppliers.
Act No. 264/2025 Coll., on Cybersecurity, brings new requirements for supplier management and what should be reflected in contractual documentation. It is absolutely essential to correctly distinguish whether the obligated person is in a lower or higher regime of obligations – and how the specific category of significant suppliers is reflected in contracts.
This webinar is designed as a short, introductory (high-level) overview for quick orientation. The goal is not to go into depth of individual paragraphs, but to clearly explain the logic of the requirements, practical impacts and typical places where organizations most often encounter problems when setting up supplier relationships.
The webinar is particularly suitable for:
- management and senior staff of obligated persons (IT, operations, security, compliance, risk),
- purchasing / procurement and persons responsible for supplier management,
- lawyers and contract managers who review or set up contract documentation,
- ICT and security teams that collaborate on contractual requirements and supplier audits.
What will you take away from the webinar?
- How the new law works with the term supplier and why categorization matters.
- What are the basic differences in contractual requirements in the lower and higher regimes?
- Who is a significant supplier, why is it a “special” category, and what does it typically mean for contracts?
- Na jaké okruhy se při revizi smluv zaměřit (v obecné rovině): bezpečnostní požadavky, kontrolní oprávnění, poddodavatelé, odpovědnost, incidenty, součinnost apod.
- How to practically approach the modification of existing relationships: where to start and how to set your own procedure.
Don’t wait for the new adjustment to catch up with you during an audit, inspection, or incident — it’s best to have basic orientation and the correct “direction” setting in advance.

