Are you unsure which obligations actually apply to your organisation?
Law · Technology · Practice
Cybersecurity is not a one-off task.
It is a continuous process.
We help organisations manage risk continuously, implement effective safeguards and maintain regulatory compliance.
Trusted by, among others
What we do
We connect law, technology and real-world operational experience.
We combine legal certainty with technical expertise and more than twenty years of experience designing, operating and securing enterprise ICT environments.
This allows us to design safeguards that make sense to management, stand up to regulatory scrutiny and remain practical for your IT team.
Meet our teamWhen you need us
We help where important questions do not have a simple answer.
Every organisation has a different context. These questions require answers grounded in real operations, not a universal checklist.
Does security in your organisation exist only on paper?
Is your documentation missing or no longer aligned with reality?
Do you manage cyber risk, or merely react to it?
Is an audit or inspection approaching, and are you unsure whether you are ready?
Are you confident that your ICT infrastructure is truly protected?
Do you lack in-house cybersecurity expertise?
Are your employees part of your defence, or your greatest risk?
Services
How we can help
We do not treat individual disciplines in isolation. We connect them according to what your organisation actually needs.
Compliance and cybersecurity governance
We identify the relevant obligations and turn them into a system of responsibilities, processes and controls aligned with how your organisation actually operates.
Learn moreAudits, risk analysis and technical assessment
We assess the actual technical and organisational environment, identify weaknesses and prioritise safeguards by significance.
Learn moreImplementation of safeguards and internal processes
We help turn approved requirements into day-to-day processes, roles, documentation and technical safeguards.
Learn moreExternal experts
We complement your internal team with legal, technical or process expertise for long-term governance, a specific project or a demanding situation.
Learn moreTraining and security awareness
We prepare employees, management and specialist roles for the situations that determine the organisation’s actual resilience.
Learn moreOur team
Expertise that connects three worlds.
Each specialist has a clear area of responsibility, while working as one team for the client.
Jakub Rejzek
Technology, regulation and cybersecurity governance
Michal Břežek
Law, compliance and digital regulation
Petr Gondek
Security audits, data protection and risk management
Aleš Kozdera
IT law, internal processes and security documentation
Aleš Krempa
ISMS, implementation and process management
Srbuhi Gharibyan
Organisational security and security culture
Laura Taranu
Regulatory analysis, guidance and internal policies
A typical engagement
From a regulatory obligation to an effective security system.
A manufacturing company needed to assess its readiness for new regulation. We combined a legal review with a technical infrastructure analysis to create a prioritised, operationally realistic action plan.
How an engagement works01Assessment of obligations
02Environment analysis
03Planning and implementation
04Continuous verification
Shieldora Brief
What matters right now.
Guidance, practical briefings and invitations to expert events—without unnecessary noise.
All articlesGuide to incident reporting under the lower-obligation regime of the new Act
What an organisation must decide before an incident occurs in order to assess its significance and meet the subsequent deadlines.
Digital service providers: understanding overlapping European and Czech requirements
Practical guidance on the relationship between Commission Implementing Regulation (EU) 2024/2690, the new Act and Czech cybersecurity decrees.
Frequently asked questions
Clear answers before the first step.
We begin by mapping services, processes, information, technologies and people. Only then do we determine risks and protection priorities based on the actual environment.
We do not replace internal IT. We provide legal, security and methodological support, jointly verify the feasibility of safeguards and continuously evaluate how they work.
No. Documentation is only one part of the system. We monitor changes, support implementation and verify that processes and safeguards reflect reality.
No. For the first conversation, a brief description of the situation, why you are addressing it and the expected outcome is enough. We will identify the necessary materials together once the approach is clear.
Yes. We can start with a targeted assessment, audit or consultation. If a broader context emerges, you will receive recommendations and priorities for next steps—not an automatically expanded scope.
In the initial phase, we separate immediate risks, regulatory obligations and long-term improvements. Management then knows what to address now, what to plan and what to consciously accept for the time being.
Contact
Let us identify the first meaningful step together.
Briefly describe your situation. We will get back to you and suggest how an initial consultation can work.
Contact Shieldora