Certification and alignment of the system with ISO27001

The project began in June 2026 to strengthen Montelektro’s cybersecurity and resilience and to prepare for future compliance with European requirements, especially the NIS2 Directive and the Cyber Resilience Act.

In today’s digital environment, protecting data, business information, and digital assets is essential to ensure business continuity and maintain customer trust amid increasingly frequent and sophisticated cyberattacks.

The project’s key activity is establishing and certifying an Information Security Management System (ISMS) in accordance with ISO/IEC 27001. This will bring existing practices together within a single framework with clearly defined responsibilities, objectives, and regular reviews. Processes for risk management, incident management, and supply chain management will be established, directly supporting compliance with the requirements of the NIS2 Directive.

Montelektro places particular emphasis on educating employees about the fundamentals of cybersecurity to help them recognize potential threats and become familiar with secure password use, protecting confidential information, and responding appropriately in the event of a suspected security incident. Key IT personnel will receive training on the requirements of the NIS2 Directive.

The project ensures long-term sustainability by implementing the PDCA (Plan–Do–Check–Act) cycle, conducting internal audits, and using regular company budget funds rather than external sources. This approach achieves both formal compliance and genuine resilience in business and operational processes, which is vital for customer trust and competitiveness.

By aligning with the requirements of the Cyber Resilience Act, Montelektro will enhance the quality of its integrated solutions and reduce the risk of vulnerabilities in the systems it delivers, thereby directly contributing to achieving a high level of cybersecurity and resilience.