The digitisation of schools, libraries and local governments has brought greater convenience, more efficient communication and access to online services. On the other hand, these institutions are increasingly facing threats from cyberspace. Poor IT security is a common problem, especially in small organisations – where technical competence, regular maintenance and strategic oversight of IT infrastructure is lacking.

Why are schools and small public organisations at risk?

  • Low security priority – Without a centralised IT department, security is often neglected.

  • Poorly protected networks and passwords – Wi-Fi segmentation, two-factor authentication and access control are often lacking.

  • Obsolete systems – Software is not updated, backups do not work or are unreliable.

  • A bad example from practice – Intrusions into school and local authority systems cause leaks of personal data, unavailability of services and loss of public trust.

Statistics show that small chains in restaurants, schools, hotels and municipalities are among the most frequently attacked – precisely because they are the most vulnerable.

NIS2 and GDPR – legislation to be taken seriously

What is NIS2?

  • The NIS2 Directive (effective from 17.10.2024) replaces the original NIS and substantially expands the range of organisations that must ensure cyber resilience.

  • In Slovakia, it was adopted in the form of Act No. 366/2024 Coll., with effect from 1 January 2025.

  • It also applies to public schools, libraries, municipalities, cultural and social facilities.

  • It requires risk analysis, incident prevention, response plan, technical assurance and documentation.

How does GDPR relate to this?

  • GDPR (General Data Protection Regulation) has been in force since 2018 and requires a responsible approach to managing the personal data of pupils, staff and residents.

  • Data access rules, logging, encryption, staff training, and documented procedures are essential.

What to prepare for today?

From 2025, they will regular state inspections will take placeto verify that schools and organisations are complying with NIS2 and GDPR requirements. It is not enough to have everything ‘on paper’ – an institution needs to be prepared in real terms: to have processes in place, infrastructure in place and a team ready to respond to incidents.

In our experience, these are the measures that can cover the most critical IT risksthat schools and businesses face on a daily basis – such as data theft, service outages or unauthorised access to sensitive data.

How can we help you in FixIS?

FixIS has many years of experience in managing IT infrastructure for the public sector and schools. Our solutions take into account both technical and operational constraints and always aim for real results, not just formal compliance.

Our services for schools and municipalities:

  1. Cybersecurity and IT Infrastructure Audit – We will identify weaknesses and prepare a proposal for measures.

  2. Implementation of technical solutions – Network segmentation, firewall, encryption, backup, monitoring, two-factor authentication.

  3. Authentication via Office 365 / SAAS – One of the most secure solutions without shared passwords – secure access and password policy compliance without user intervention.

  4. Automated information and monitoring – 24/7 monitoring system with incident reports and alerts.

  5. Training, documentation, incident response plan – We will also prepare you formally – for inspection or audit.

Benefits of working with FixIS

  • Reducing risks and increasing safety
  • Compliance with legislative requirements
  • Clear documentation and accountability
  • Modern technologies and proven practices
  • Long-term support and regular service

Contact us

If you are responsible for a school, library, municipality or public institution – now is the time to prepare for 2026. We will be happy to explain exactly what you need, what you already have and what still needs to be added.