Petra Jirošová

Petra

Jirošová

Information security consultant

Petra focuses on assessing where organisations stand against the requirements of laws and security standards, and turns her findings into concrete next steps. Clients come away with a clear picture of what they already have in place, what they still need to address and where to start. You’ll most often work with her on gap analyses for ISO 27001, GDPR or the new Czech Cybersecurity Act (under both the lower- and higher-obligation regimes), and on the subsequent updates to company documentation. She also has experience with Commission Implementing Regulation (EU) 2024/2690 and the Slovak Cybersecurity Act.

Professional certifications

ISO 27001 ISMS Lead Auditor

Information Security Specialist (Czechitas)

Cybersecurity Manager (NÚKIB)

How would you explain cybersecurity to someone who only remembers landlines and cassette tapes?

Think of cybersecurity as a well-structured defensive line in football – when it’s properly set up, no one gets near your goal.

What’s one thing everyone should do to improve their online security?

Check your privacy settings on social media – once something leaks, you can’t take it back.

Employee and management training under the Cybersecurity Act

Who must complete mandatory cybersecurity training under the Cybersecurity Act? An overview of the requirements for both the lower-tier and higher-tier regimes.

How to respond to a NÚKIB notice and assess your regulated service

A notice from NÚKIB doesn’t automatically mean you fall under the Cybersecurity Act. Here’s how to assess your regulated service and what to do next.

CRA reporting obligations: what must you report from September 11th 2026?

From September 11th 2026, the CRA requires manufacturers to report actively exploited vulnerabilities and severe incidents. An overview of the conditions, the deadlines, and what to have ready.