ith security

Implementation of NIS2, SOC, and SIEM for IT/ICT Support Companies

Your IT/ICT company is no longer just protecting itself—it’s protecting its customers’ entire supply chain

IT/ICT support companies (integrators, managed service providers, customer infrastructure administrators) are subject to NIS2 as entities providing ICT service management services. In addition, the security of your company directly impacts the security of the dozens of organizations to which you provide services. ITH supports companies at every stage of NIS2 compliance implementation and helps answer the questions that customers are increasingly asking during supplier audits.

Quick e-mail offer Let's talk!
ith-nissocsiem-it-hero-img
Quick e-mail offer Let's talk!

What is the NIS2 Directive?

The NIS2 Directive harmonizes cybersecurity requirements across the EU and introduces stronger oversight and enforcement mechanisms than the previous NIS Directive from 2016.
In Poland, the regulation was implemented as an amendment to the Act on the National Cybersecurity System. The new NIS2 provisions have been in force under Polish national law since April 3, 2026. Companies that met the criteria on the date the Act entered into force have until April 3, 2027, to implement the required procedures. Critical entities are additionally required to conduct their first security audit by April 3, 2028.

IT support companies may be subject to NIS2 in two ways

The NIS2 Directive covers 18 economic sectors and classifies affected entities as critical or important. Among them is the sector covering the management of ICT services in B2B relationships; thus, IT support companies, system integrators, and managed service providers are undoubtedly subject to NIS2.

It’s also worth keeping in mind that the NIS2 requirements may affect your company indirectly as well. Customers in sectors covered by the directive are required to assess their suppliers for compliance, which is why they are increasingly requiring their IT partners to implement security measures.

Don't risk fines. Check whether NIS2 applies to your company

Fill out the survey What is NIS2?

New Obligations Under NIS2 for IT/ICT Companies

The NIS2 Directive introduces new obligations that, in practice, require a systematic approach to cyber risk management. The most important of these include:

  • Implementation of Risk Management Measures

    commensurate with the estimated risk and actual threats to which the IT systems and the networks and IT systems used to serve customers are exposed.

  • Regular audits

    that demonstrate compliance with safety requirements. You are required to provide up-to-date audit documentation upon request by the competent authorities.

  • Reporting incidents to the CSIRT within strictly defined timeframes:

    1. Initial report: within 24 hours of the incident being detected;
    2. supplementary report: within 72 hours of becoming aware of the incident;
    3. Final report: within one month of the incident’s conclusion.

  • Business Continuity and Crisis Management

    disaster recovery plans and response procedures that must withstand the test of a real-world attack, not just a paper audit.

  • Assessing the Security of Your Suppliers

    and supply chain partners—it’s worth remembering that you, too, are subject to such an evaluation by customers.

  • Regular training and raising awareness among employees throughout the organization.

    Failure to comply with NIS2 regulations not only results in administrative penalties, but also means your company will lose the trust of customers, for whom a supplier’s compliance is now a prerequisite for signing a contract.

Penalties and Personal Liability for Noncompliance

Failure to comply with NIS2 regulations carries real risks—not only financial, but also personal for senior management:

  • The maximum administrative fine for key entities may be up to 10 million euros or 2% of the organization’s annual turnover. The higher amount applies.
  • The management board bears personal responsibility for any failure to properly implement compliance measures. Penalties for the management board include a ban on holding executive positions. Additional sanctions may include fines of up to 300% of their compensation.

For an IT/ICT company, the risk is twofold. This is because a penalty imposed on your organization also means the loss of contracts with clients who are subject to NIS2.

ith-nis-kary-img

Comprehensive protection for IT/ICT companies—the four pillars of a single offering

ITH will guide your organization through the entire implementation process: a single audit, a consistent process managed by a single provider.

1. NIS2 Implementation —From Audit to Certification

We start with an audit to identify cybersecurity vulnerabilities. The next step is to prepare comprehensive documentation ready for inspection and to train the entire team. We conclude the implementation process with a final report and the launch of ongoing monitoring.

2. SOC - Your infrastructure protected 24/7/365

Our team of analysts monitors your infrastructure around the clock. We provide real-time threat detection and support your organization in responding to incidents, even at night and on weekends.

3. SIEM - Full Visibility of the Infrastructure

This system collects and correlates events from servers, network devices, and endpoints in a single location and detects potential threats before they disrupt your business operations.

4. Cybersecurity Training — An Informed Team as the First Line of Defense

The goal of these training sessions is to prepare organizations for compliance audits and to increase their overall resilience against cyberattacks. Don’t let your company become an easy target. Training should be ongoing and regularly updated to address new and evolving threats.

SOC for IT/ICT Companies

The ITH team takes on the responsibility of continuously monitoring the infrastructure and responds to real threats before they cause serious damage to you and your customers:

  • 24/7/365 Monitoring — ITH ensures your organization’s security around the clock.
  • Real-time threat detection, with a response time of less than 15 minutes and immediate isolation of compromised systems.
  • Protection against ransomware and attacks targeting RMM tools and remote access—some of the most common attack vectors used against IT/ICT companies.
  • Detection of phishing and BEC, including attempts to impersonate administrators or vendors in communications with customers.
  • Complete incident documentation in accordance with NIS2 requirements and timely reporting to the relevant authorities.
  • Periodic Reports (Monthly and Quarterly Risk Overviews) — materials you can use in compliance discussions with your clients.
Learn more about SOC ITH

SIEM—a single view of the entire IT/ICT infrastructure

The ITH SIEM system collects logs from various sources, correlates security events, and delivers real-time security alerts.

SIEM collects data from:

  • EDR/XDR systems and the team’s client workstations (Windows/Linux/macOS),
  • servers and IT systems used to serve customers,
  • firewalls, IDS/IPS systems, and network devices,
  • remote access tools and password management systems,
  • cloud environments and third-party integrations.

A managed SIEM eliminates the need to invest in licenses, infrastructure, or your own cybersecurity specialists. You receive a ready-to-use environment maintained by ITH experts.

See the full capabilities of ITH SIEM

Cybersecurity Training Tailored for IT/ICT Companies

Even the best-secured infrastructure won’t help if a team member opens a malicious attachment or provides login credentials in response to a fraudulent phone call. Our training programs combine theory with practice. The hands-on components of the training help employees understand that their everyday decisions matter for the security of the entire company.

Choose the plan that's right for your organization:

2 HOURS

Basic Security Training

The perfect introduction for all employees. Raising awareness of everyday hazards.

  • Due Diligence in Data Protection—Legal Basis
  • Password Creation and Multi-Factor Authentication (MFA)
  • Recognizing Phishing
  • No limit on the number of participants—the ability to train the entire organization at once
I choose
MOST POPULAR
4 HOURS

Standard Security Training

It expands participants' knowledge of the practical aspects of information security. Each participant receives training materials and a certificate.

  • Data Security for Data Processed in the Cloud and on Mobile Devices
  • Legal obligations (NIS2, GDPR)
  • Social Engineering in Business Relationships
  • Training materials and a personalized certificate for each participant
I choose
6 HOURS

Premium Security Training

Advanced incident response procedures and crisis management for IT and security personnel and executive management.

  • Attack simulations—deepfakes, spoofing
  • Documentation as evidence of due diligence before the supervisory authority
  • "Before" and "After" Knowledge Tests
  • +1 hour of consultation in areas requiring improvement
I choose

Why do IT/ICT companies choose ITH?

icons8-partnership-96 1

One partner, a complete security ecosystem

Audits, NIS2 and SOC implementation, SIEM, training, as well as internet services, colocation, backup, and managed firewalls—all from a single...

Read more
icons8-wifi-64 1

Operator with its own network

ITH is not only a security integrator but also an electronic communications provider with full visibility into network traffic. This...

Read more
icons8-increase-96 1

Scalability without renegotiating the contract

Is your business growing, with more customers and environments to support? The scope of protection grows along with you, and...

Read more
icons8-experience-100 1

Over 20 years of experience

The ITH team has many years of experience in the IT and telecommunications markets—we design, maintain, and secure networks and...

Read more
icons8-client-100 1

Compliance that can be demonstrated to the customer

The documentation, reports, and procedures prepared by ITH serve as ready-to-use evidence during security audits conducted by clients in key...

Read more

Don't wait for the first inspection or the first incident

Implementing NIS2 is a process that takes time. The sooner you start preparing, the better your chances of avoiding costly consequences.

Quick e-mail offer Let's talk!

They trusted us

ITH
ITH
ITH
ITH
ITH
See more references

Are your needs limited to cybersecurity?

Check out what else we have for you!

ith_cloud-white

Modern Cloud Solutions for Business. Public Cloud and secure connections to global clouds provide flexibility and access to IT resources from anywhere.

ith_data-white

Professional data centers: dedicated servers, colocation and server administration. We guarantee security, high availability and direct connections to global clouds.

ith_net-white

Internet access for business in two product lines: symmetrical lines with guaranteed parameters for large companies or asymmetrical lines for smaller customers.

ith_security-white

Comprehensive IT security services. Audits, vulnerability scans, protection against DDoS attacks, managed firewall and backups. Everything your company needs to operate securely.

ith_instalacje-white

Construction and maintenance of modern technical infrastructure: structured networks, video surveillance, access control and alarm systems, and intelligent buildings.

ith_outsourcing-white

IT support in a service model. We provide support for businesses, conferences and events, server and network infrastructure administration, and WiFi design and monitoring.

ith_hosting-white

Stable and secure hosting environments for enterprise applications and websites. Tailored solutions for businesses requiring reliable infrastructure.

ith_tele-white

Telecommunications solutions for business: virtual PBX, SIP Trunk, telephone subscriptions, IP phones and web-based systems. Corporate communications always under full control.

Write to us

Support
Maintenance

ITH NOC
Management Center
Infrastructure ITH
Open all week, 24 hours a day

Solutions
for you

ITH sales team
Open Monday through Friday from 9:00 a.m. to 8:00 p.m.

    Expand This offer does not constitute an offer within the meaning of the Civil Code. This offer is intended solely for business customers. All prices listed are net prices. * Pursuant to Article 23 of the Act of August 23, 1997, on the Protection of Personal Data (Journal of Laws of 2016, No. 922 of June 28, 2016, consolidated text), I hereby consent to the processing of my personal data provided in the form above (i.e., Tax Identification Number (NIP), phone number, email address) by ITH Sp. z o.o., with its registered office in Warsaw, ul. Nowogrodzka 31, 00-511 Warsaw, registered in the Register of Entrepreneurs of the National Court Register under KRS number 0000469801, Tax ID (NIP): 7010389026, REGON: 146777630, for the purpose of presenting and fulfilling a commercial offer. I have been informed of my right to access the data I have provided, to modify it, and to object to its further processing. The controller of personal data is ITH Sp. z o.o., with its registered office in Warsaw, at ul. Nowogrodzka 31, 00-511 Warsaw, registered in the Register of Entrepreneurs of the National Court Register under KRS number 0000469801, NIP: 7010389026, REGON: 146777630.
    _DSC6603

    FAQ

    Yes, provided you meet the size criteria, ICT service management in B2B relationships is explicitly identified as one of the sectors covered by NIS2. Additionally, even companies below the statutory threshold are increasingly required by contract to meet the security requirements of their customers in critical sectors. ITH conducts an audit at the start of the partnership.

    Both categories are required to implement risk management measures, report incidents, and conduct regular training; however, key entities are subject to stricter, proactive oversight by the competent authorities, rather than merely a response to reports. The minimum amount of financial penalties also differs.

    Typically, the process takes anywhere from 14 business days to several months, depending on the size of the company and the number of environments to be connected. SIEM configuration and security rule tuning are carried out simultaneously, and a dedicated ITH engineer will guide you through the entire process.

    In accordance with NIS2 security requirements, a multi-stage model applies: an early warning within 24 hours of detection, a detailed incident report within 24–72 hours, and a periodic report within one month. SOC ITH maintains this documentation on behalf of your company, ensuring compliance at every stage.

    Yes, this is one of the most common reasons why IT/ICT companies choose to work with ITH. Monthly reports, quarterly risk overviews, and NIS2 documentation are materials that significantly shorten the due diligence process conducted by clients in key and critical sectors.

    Yes, this is a key element of compliance. NIS2 places direct, personal responsibility on the board of directors. The Premium Package was designed with decision-makers in mind.