{"id":4553,"date":"2023-08-31T13:57:21","date_gmt":"2023-08-31T11:57:21","guid":{"rendered":"https:\/\/sys.buges.sk\/penetracne-testy\/"},"modified":"2026-08-29T17:48:03","modified_gmt":"2026-08-29T15:48:03","slug":"penetracne-testy","status":"publish","type":"page","link":"https:\/\/sysnetshield.com\/sk\/penetracne-testy\/","title":{"rendered":"Penetra\u010dn\u00e9 testy"},"content":{"rendered":"\n
\n
\n
\n

Penetra\u010dn\u00e9 testy<\/strong><\/h1>\n\n\n\n

Odha\u013ete slabiny sk\u00f4r, ne\u017e to urob\u00ed niekto in\u00fd. Vykon\u00e1vame manu\u00e1lne penetra\u010dn\u00e9 testy webov\u00fdch aplik\u00e1ci\u00ed, infra\u0161trukt\u00fary, cloudov\u00fdch prostred\u00ed aj API. V\u00fdsledkom je konkr\u00e9tna, zrozumite\u013en\u00e1 spr\u00e1va s d\u00f4kazmi a odpor\u00fa\u010daniami, ktor\u00e1 sa re\u00e1lne d\u00e1 pou\u017ei\u0165 na n\u00e1pravu. <\/p>\n\n\n\nM\u00e1m z\u00e1ujem o penetra\u010dn\u00fd test<\/a>\n<\/div>\n<\/div>\n<\/section>\n\n

\n
\n

\u010co s\u00fa penetra\u010dn\u00e9 testy?<\/h2>\n\n\n\n

Penetra\u010dn\u00fd test (skr\u00e1tene pentest) je riaden\u00fd, autorizovan\u00fd \u00fatok na v\u00e1\u0161 syst\u00e9m alebo aplik\u00e1ciu. Etick\u00fd hacker sa pok\u00fa\u0161a prenikn\u00fa\u0165 do syst\u00e9mu rovnak\u00fdmi technikami, ak\u00e9 by pou\u017eil skuto\u010dn\u00fd \u00fato\u010dn\u00edk \u2013 ale v bezpe\u010dnom, vopred dohodnutom r\u00e1mci a s va\u0161\u00edm s\u00fahlasom. <\/p>\n\n\n\n

Penetra\u010dn\u00e9 testovanie odha\u013euje:<\/p>\n\n\n\n

\n
\n<\/path><\/path><\/path><\/svg><\/span>\n\n\n\n

Zranite\u013enosti, ktor\u00e9 skenery nezachytia<\/h3>\n\n\n\n

Logick\u00e9 chyby v aplik\u00e1cii, chybne nastaven\u00e9 opr\u00e1vnenia a zneu\u017eite\u013en\u00e9 business-logic nedostatky.<\/p>\n<\/div>\n\n\n\n

\n<\/circle><\/path><\/svg><\/span>\n\n\n\n

Skuto\u010dn\u00fd dopad \u00fatoku<\/h3>\n\n\n\n

Nielen zoznam CVE \u010d\u00edsiel, ale konkr\u00e9tny d\u00f4kaz (Proof of Concept), \u010do \u00fato\u010dn\u00edk mohol z\u00edska\u0165.<\/p>\n<\/div>\n\n\n\n

\n<\/rect><\/path><\/svg><\/span>\n\n\n\n

S\u00falad s regula\u010dn\u00fdmi po\u017eiadavkami<\/h3>\n\n\n\n

NIS2, z\u00e1kon o kybernetickej bezpe\u010dnosti (ZoKB), odpor\u00fa\u010dania N\u00daKIB aj po\u017eiadavky pois\u0165ovate\u013eov.<\/p>\n<\/div>\n\n\n\n

\n<\/circle><\/path><\/svg><\/span>\n\n\n\n

Medzery v detekcii<\/h3>\n\n\n\n

\u010ci by v\u00e1\u0161 SOC alebo SIEM \u00fatok v\u00f4bec zaznamenal.<\/p>\n<\/div>\n<\/div>\n\n\n\n

Penetra\u010dn\u00fd test nie je jednorazov\u00e1 formalita. Je to akt\u00edvna invest\u00edcia do bezpe\u010dnosti, ktor\u00e1 chr\u00e1ni va\u0161e d\u00e1ta, reput\u00e1ciu aj vz\u0165ahy so z\u00e1kazn\u00edkmi. <\/p>\n<\/div>\n<\/section>\n\n

\n
\n

\u010co testujeme?<\/h2>\n\n\n\n

SysnetShield pokr\u00fdva \u0161tyri hlavn\u00e9 oblasti penetra\u010dn\u00e9ho testovania:<\/p>\n\n\n\n

\n\n\n
\n<\/rect><\/rect><\/path><\/svg><\/span>\n\n\n\n

Webov\u00e9 aplik\u00e1cie<\/strong> \u2013 pod\u013ea metodol\u00f3gie OWASP Testing Guide a ASVS: autentiz\u00e1cia, autoriz\u00e1cia, spr\u00e1va sessions, valid\u00e1cia vstupov a business-logic zranite\u013enosti<\/p>\n<\/div>\n\n\n\n

\n<\/path><\/path><\/path><\/svg><\/span>\n\n\n\n

Infra\u0161trukt\u00fara<\/strong> \u2013 extern\u00e9 aj intern\u00e9 testy siet\u00ed, serverov, sie\u0165ov\u00fdch zariaden\u00ed, firewallov a VPN, zvonku aj zvn\u00fatra siete<\/p>\n<\/div>\n\n\n\n

\n<\/path><\/path><\/svg><\/span>\n\n\n\n

Cloud<\/strong> \u2013 AWS, Azure aj Google Cloud: nespr\u00e1vne nastaven\u00e9 S3 buckety, prehnan\u00e9 IAM roly, expoz\u00edcia metad\u00e1t a nedostato\u010dn\u00e1 segment\u00e1cia<\/p>\n<\/div>\n\n\n\n

\n<\/path><\/path><\/path><\/svg><\/span>\n\n\n\n

API<\/strong> (REST, GraphQL, SOAP) \u2013 autentiz\u00e1cia (OAuth, JWT, API k\u013e\u00fa\u010de), autoriz\u00e1cia na \u00farovni objektov (IDOR\/BOLA), rate-limiting a injekcie<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n

\n
\n

Ako penetra\u010dn\u00fd test prebieha?<\/h2>\n\n\n\n

Na\u0161a metodol\u00f3gia je \u0161trukt\u00farovan\u00e1 do \u0161iestich f\u00e1z, ktor\u00e9 sme odla\u010fovali na desiatkach projektov:<\/p>\n\n\n\n

\n
\n
1<\/div>\n\n\n\n

\u00davodn\u00e1 konzult\u00e1cia<\/h3>\n\n\n\n

Zist\u00edme, \u010do chcete testova\u0165, ak\u00e9 s\u00fa va\u0161e ciele a kde s\u00fa hranice. Konzult\u00e1cia je zadarmo a nez\u00e1v\u00e4zn\u00e1 \u2013 ozveme sa do 24 hod\u00edn. (1\u20132 pracovn\u00e9 dni) <\/p>\n<\/div>\n\n\n\n

\n
2<\/div>\n\n\n\n

Pl\u00e1novanie, NDA a Rules of Engagement<\/h3>\n\n\n\n

Podp\u00ed\u0161eme zmluvu o ml\u010danlivosti a definujeme presn\u00fd rozsah testu \u2013 \u010do je v scope, v ak\u00fdch hodin\u00e1ch bude testovanie prebieha\u0165 a kto je kontaktnou osobou pri urgentnom n\u00e1leze. (1\u20133 pracovn\u00e9 dni) <\/p>\n<\/div>\n\n\n\n

\n
3<\/div>\n\n\n\n

Vykonanie testu<\/h3>\n\n\n\n

Kombinujeme automatizovan\u00e9 skenovanie pre r\u00fdchle pokrytie s hlbok\u00fdm manu\u00e1lnym testovan\u00edm na odhalenie logick\u00fdch a business-logic zranite\u013enost\u00ed. (5\u201315 pracovn\u00fdch dn\u00ed) <\/p>\n<\/div>\n\n\n\n

\n
4<\/div>\n\n\n\n

Anal\u00fdza a CVSS sk\u00f3rovanie<\/h3>\n\n\n\n

Ka\u017ed\u00fa zranite\u013enos\u0165 klasifikujeme pod\u013ea CVSS na \u0161k\u00e1le None a\u017e Critical; n\u00e1lezy bez priameho rizika ozna\u010dujeme ako Informational. Ku ka\u017edej pripravujeme Proof of Concept a odpor\u00fa\u010dania na n\u00e1pravu. (3\u20135 pracovn\u00fdch dn\u00ed) <\/p>\n<\/div>\n\n\n\n

\n
5<\/div>\n\n\n\n

Prezent\u00e1cia v\u00fdsledkov<\/h3>\n\n\n\n

Technick\u00e1 spr\u00e1va pre v\u00e1\u0161 IT t\u00edm s detailn\u00fdmi krokmi reprodukcie a executive summary pre mana\u017ement bez technick\u00e9ho \u017earg\u00f3nu, s prioritiz\u00e1ciou n\u00e1pravy. (1 pracovn\u00fd de\u0148) <\/p>\n<\/div>\n\n\n\n

\n
6<\/div>\n\n\n\n

Retesting<\/h3>\n\n\n\n

Potom, \u010do v\u00e1\u0161 t\u00edm zapracuje odpor\u00fa\u010dania, over\u00edme, \u010di boli zranite\u013enosti skuto\u010dne odstr\u00e1nen\u00e9. Retesting je s\u00fa\u010das\u0165ou ka\u017ed\u00e9ho projektu. (2\u20133 pracovn\u00e9 dni) <\/p>\n<\/div>\n<\/div>\n\n\n\n

\nM\u00e1m z\u00e1ujem o penetra\u010dn\u00fd test<\/a>\n<\/div>\n<\/div>\n<\/section>\n\n
\n
\n
\n
\n\"Bezpe\u010dnostn\u00ed\n<\/div>\n\n\n
\n

\u010co dostanete ako v\u00fdstup?<\/h2>\n\n\n\n

Penetra\u010dn\u00fd test od SysnetShield nie je len zoznam n\u00e1lezov. Dostanete: <\/p>\n\n\n\n

<\/path><\/svg><\/span>Technick\u00fa spr\u00e1vu<\/strong> \u2013 detailn\u00fd opis ka\u017edej zranite\u013enosti s krokmi k reprodukcii, CVSS sk\u00f3re a odpor\u00fa\u010danou n\u00e1pravou<\/span><\/p>\n\n\n\n

<\/path><\/svg><\/span>Executive summary<\/strong> \u2013 preh\u013ead pre mana\u017ement bez technick\u00e9ho \u017earg\u00f3nu, s prioritiz\u00e1ciou n\u00e1pravy<\/span><\/p>\n\n\n\n

<\/path><\/svg><\/span>Proof of Concept<\/strong> \u2013 screenshoty, z\u00e1znamy a k\u00f3d preukazuj\u00faci re\u00e1lnu zneu\u017eite\u013enos\u0165 ka\u017edej zranite\u013enosti<\/span><\/p>\n\n\n\n

<\/path><\/svg><\/span>CVSS sk\u00f3rovanie<\/strong> \u2013 \u0161tandardizovan\u00e9 hodnotenie z\u00e1va\u017enosti ka\u017ed\u00e9ho n\u00e1lezu<\/span><\/p>\n\n\n\n

<\/path><\/svg><\/span>Odpor\u00fa\u010dania na n\u00e1pravu<\/strong> \u2013 konkr\u00e9tne kroky pre v\u00e1\u0161 IT\/dev t\u00edm, nielen v\u0161eobecn\u00e9 rady<\/span><\/p>\n\n\n\n

<\/path><\/svg><\/span>Retesting<\/strong> \u2013 overenie, \u017ee opraven\u00e9 zranite\u013enosti s\u00fa skuto\u010dne uzavret\u00e9<\/span><\/p>\n\n\n\n

V\u00fdstupy dod\u00e1vame v \u010de\u0161tine. Na vy\u017eiadanie je mo\u017en\u00e9 doda\u0165 spr\u00e1vu aj v angli\u010dtine. <\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n

\n
\n
\n
\n

Pre koho s\u00fa penetra\u010dn\u00e9 testy?<\/h2>\n\n\n\n

Penetra\u010dn\u00e9 testovanie nie je len pre ve\u013ek\u00e9 korpor\u00e1cie. Je relevantn\u00e9 pre rad organiz\u00e1ci\u00ed \u2013 od regulovan\u00fdch poskytovate\u013eov slu\u017eieb a\u017e po startupy pred vstupom na zahrani\u010dn\u00fd trh. <\/p>\n<\/div>\n\n\n

\n\"Zamestnanec\n<\/div>\n<\/div>\n\n\n
\n
\n<\/rect><\/path><\/svg><\/span>\n\n\n\n

Poskytovatelia regulovan\u00fdch slu\u017eieb<\/h3>\n\n\n\n

Pod\u013ea NIS2 a ZoKB je pre re\u017eim vy\u0161\u0161\u00edch povinnost\u00ed testovanie zranite\u013enost\u00ed a penetra\u010dn\u00e9 testovanie z\u00e1konnou povinnos\u0165ou pod\u013ea vyhl\u00e1\u0161ky \u010d. 409\/2025 Zb. <\/p>\n<\/div>\n\n\n\n

\n<\/path><\/path><\/svg><\/span>\n\n\n\n

Firmy pred nasaden\u00edm novej aplik\u00e1cie<\/h3>\n\n\n\n

Zisti\u0165 zranite\u013enosti pred ostrou prev\u00e1dzkou je mnohon\u00e1sobne lacnej\u0161ie ne\u017e rie\u0161i\u0165 bezpe\u010dnostn\u00fd incident po nasaden\u00ed.<\/p>\n<\/div>\n\n\n\n

\n<\/path><\/path><\/path><\/svg><\/span>\n\n\n\n

E-shopy a fintech firmy<\/h3>\n\n\n\n

Spracov\u00e1vaj\u00fa platobn\u00e9 d\u00e1ta a osobn\u00e9 \u00fadaje. \u00danik m\u00f4\u017ee znamena\u0165 pokuty GDPR aj stratu z\u00e1kazn\u00edckej d\u00f4very. <\/p>\n<\/div>\n\n\n\n

\n<\/path><\/path><\/path><\/svg><\/span>\n\n\n\n

Startupy a scale-upy<\/h3>\n\n\n\n

Vstup na zahrani\u010dn\u00e9 trhy a invest\u00edcie od venture capital fondov st\u00e1le \u010dastej\u0161ie vy\u017eaduj\u00fa dolo\u017eenie v\u00fdsledkov penetra\u010dn\u00e9ho testu.<\/p>\n<\/div>\n\n\n\n

\n<\/circle><\/path><\/svg><\/span>\n\n\n\n

Firmy po bezpe\u010dnostnom incidente<\/h3>\n\n\n\n

Test odhal\u00ed, akou cestou sa \u00fato\u010dn\u00edk dostal dovn\u00fatra a \u010di nezanechal zadn\u00e9 vr\u00e1tka.<\/p>\n<\/div>\n\n\n\n

\n<\/path><\/path><\/svg><\/span>\n\n\n\n

Pois\u0165ovne a ich klienti<\/h3>\n\n\n\n

Kybernetick\u00e9 poistenie st\u00e1le \u010dastej\u0161ie vy\u017eaduje penetra\u010dn\u00fd test ako podmienku uzavretia alebo obnovenia zmluvy.<\/p>\n<\/div>\n<\/div>\n\n\n

Neviete, do ktorej kateg\u00f3rie patr\u00edte? Za\u010dnite bezpe\u010dnostn\u00fdm auditom<\/a> \u2013 ten ur\u010d\u00ed, ktor\u00e9 oblasti m\u00e1 zmysel testova\u0165 prioritne. <\/p>\n<\/div>\n<\/section>\n\n

\n
\n

Penetra\u010dn\u00e9 testy vs. skenovanie zranite\u013enost\u00ed<\/h2>\n\n\n\n

Tento rozdiel je k\u013e\u00fa\u010dov\u00fd a stoj\u00ed za to ho pochopi\u0165:<\/p>\n\n\n\n

<\/th>Skenovanie zranite\u013enost\u00ed<\/th>Penetra\u010dn\u00fd test<\/th><\/tr><\/thead>
\u010co rob\u00ed<\/strong><\/td>Porovn\u00e1va v\u00e1\u0161 syst\u00e9m s datab\u00e1zou zn\u00e1mych CVE<\/td>Akt\u00edvne sa pok\u00fa\u0161a zranite\u013enosti zneu\u017ei\u0165<\/td><\/tr>
Kto to rob\u00ed<\/strong><\/td>Automatick\u00fd n\u00e1stroj (Nessus, Qualys\u2026)<\/td>Certifikovan\u00fd etick\u00fd hacker<\/td><\/tr>
\u010co odhal\u00ed<\/strong><\/td>Zn\u00e1me, patchovate\u013en\u00e9 chyby<\/td>Logick\u00e9 chyby, business-logic, re\u0165azce exploitov<\/td><\/tr>
V\u00fdstup<\/strong><\/td>Zoznam CVE \u010d\u00edsiel so sk\u00f3re<\/td>Spr\u00e1va s PoC, executive summary, odpor\u00fa\u010dania<\/td><\/tr>
Cena<\/strong><\/td>N\u00edzka<\/td>Vy\u0161\u0161ia, zodpoved\u00e1 h\u013abke anal\u00fdzy<\/td><\/tr>
Vhodn\u00e9 pre<\/strong><\/td>Pravideln\u00e9 monitorovanie<\/td>H\u013abkov\u00e9 hodnotenie bezpe\u010dnosti, compliance<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

Najlep\u0161\u00ed pr\u00edstup? Skenovanie zranite\u013enost\u00ed pravidelne \u2013 kvart\u00e1lne alebo po ka\u017edej zmene \u2013 a penetra\u010dn\u00fd test aspo\u0148 raz ro\u010dne alebo pred d\u00f4le\u017eit\u00fdmi m\u00ed\u013enikmi. Z\u00e1kladn\u00fd sken zranite\u013enost\u00ed pon\u00fakame zadarmo<\/a>. <\/p>\n<\/div>\n<\/section>\n\n

\n
\n

Pre\u010do SysnetShield?<\/h2>\n\n\n\n

Na trhu je rad firiem, ktor\u00e9 pon\u00fakaj\u00fa bezpe\u010dnostn\u00e9 slu\u017eby. Tu je konkr\u00e9tny rozdiel \u2013 a \u013eudia, ktor\u00ed za n\u00edm stoja: <\/p>\n\n\n\n

\n
\n\"Patrik<\/a>\n\n\n\n

Patrik \u017d\u00e1k<\/a><\/p>\n\n\n\n

Etick\u00fd hacker a Red Teamer so zameran\u00edm na infra\u0161trukt\u00faru<\/p>\n\n\n\nProfil Patrika \u017d\u00e1ka \u2192<\/a>\n<\/div>\n\n\n\n

\n\"Juraj<\/a>\n\n\n\n

Juraj Dani\u0161<\/a><\/p>\n\n\n\n

Etick\u00fd hacker so zameran\u00edm na webov\u00e9 aplik\u00e1cie<\/p>\n\n\n\nProfil Juraja Dani\u0161a \u2192<\/a>\n<\/div>\n<\/div>\n\n\n\n

Certifik\u00e1cia t\u00edmu<\/h3>\n\n\n\n
\"CRTLCRTL<\/span>Certified Red Team Lead<\/span><\/a>\"CRTOCRTO<\/span>Certified Red Team Operator<\/span><\/a>\"CPTSCPTS<\/span>Certified Penetration Testing Specialist<\/span><\/a>\"CNPenCNPen<\/span>Certified Network Pentester<\/span><\/a>\"CCPenX-AWSCCPenX-AWS<\/span>Certified Cloud Pentesting eXpert \u2013 AWS<\/span><\/a>\"C-AI\/MLPenC-AI\/MLPen<\/span>Certified AI\/ML Pentester<\/span><\/a>\"CAPenXCAPenX<\/span>Certified AppSec Pentesting eXpert<\/span><\/a>\"THMTHM WEB1<\/span>Web App Pentester Level 1<\/span><\/a>\"N\u00daKIBN\u00daKIB<\/span>Mana\u017e\u00e9r kybernetickej bezpe\u010dnosti<\/span><\/a><\/div>
\"CRTLCRTL<\/span>Certified Red Team Lead<\/span><\/a>\"CRTOCRTO<\/span>Certified Red Team Operator<\/span><\/a>\"CPTSCPTS<\/span>Certified Penetration Testing Specialist<\/span><\/a>\"CNPenCNPen<\/span>Certified Network Pentester<\/span><\/a>\"CCPenX-AWSCCPenX-AWS<\/span>Certified Cloud Pentesting eXpert \u2013 AWS<\/span><\/a>\"C-AI\/MLPenC-AI\/MLPen<\/span>Certified AI\/ML Pentester<\/span><\/a>\"CAPenXCAPenX<\/span>Certified AppSec Pentesting eXpert<\/span><\/a>\"THMTHM WEB1<\/span>Web App Pentester Level 1<\/span><\/a>\"N\u00daKIBN\u00daKIB<\/span>Mana\u017e\u00e9r kybernetickej bezpe\u010dnosti<\/span><\/a><\/div><\/div><\/div>\n\n\n\n

CRTO<\/strong> aj CPTS<\/strong> s\u00fa plne praktick\u00e9 certifik\u00e1cie \u2013 sk\u00fa\u0161kou je nieko\u013ekod\u0148ov\u00fd \u00fatok v laborat\u00f3rnom prostred\u00ed a spracovanie reportu, nie test s v\u00fdberom odpoved\u00ed.<\/p>\n\n\n\n

\u010co n\u00e1s odli\u0161uje<\/h3>\n\n\n\n
\n
\n<\/circle><\/path><\/svg><\/span>\n\n\n\n

\u0160pecializovan\u00fd t\u00edm, nie subdod\u00e1vatelia<\/h3>\n\n\n\n

Nie sme konzulta\u010dn\u00fd dom, ktor\u00fd pr\u00e1cu prepred\u00e1va. Ka\u017ed\u00fd projekt ved\u00fa priamo \u010dlenovia n\u00e1\u0161ho t\u00edmu s plnou zodpovednos\u0165ou za v\u00fdsledok. <\/p>\n<\/div>\n\n\n\n

\n<\/path><\/path><\/svg><\/span>\n\n\n\n

Manu\u00e1lna pr\u00e1ca, nielen automatizovan\u00e9 n\u00e1stroje<\/h3>\n\n\n\n

Automatick\u00e9 skenery odhalia zn\u00e1me zranite\u013enosti. Logick\u00e9 chyby, business-logic nedostatky a re\u0165azce exploitov odhal\u00ed len sk\u00fasen\u00fd tester, ktor\u00fd mysl\u00ed ako \u00fato\u010dn\u00edk. <\/p>\n<\/div>\n\n\n\n

\n<\/rect><\/rect><\/path><\/svg><\/span>\n\n\n\n

V\u00fdstupy, ktor\u00e9 sa daj\u00fa pou\u017ei\u0165<\/h3>\n\n\n\n

Spr\u00e1va nie je akademick\u00e9 cvi\u010denie. Je p\u00edsan\u00e1 tak, aby v\u00e1\u0161 dev alebo ops t\u00edm mohol hne\u010f za\u010da\u0165 s n\u00e1pravou \u2013 s konkr\u00e9tnymi krokmi a odkazmi na zdroje. <\/p>\n<\/div>\n\n\n\n

\n<\/circle><\/path><\/svg><\/span>\n\n\n\n

Scen\u00e1re na mieru, nie \u0161abl\u00f3ny<\/h3>\n\n\n\n

Ka\u017ed\u00fd projekt staviame pod\u013ea v\u00e1\u0161ho prostredia, va\u0161ich riz\u00edk a va\u0161ich cie\u013eov. Nepou\u017e\u00edvame krabicov\u00e9 metodiky ani generick\u00e9 \u0161abl\u00f3ny. <\/p>\n<\/div>\n\n\n\n

\n<\/path><\/path><\/path><\/svg><\/span>\n\n\n\n

Diskr\u00e9tnos\u0165 a ml\u010danlivos\u0165<\/h3>\n\n\n\n

Pred ka\u017ed\u00fdm projektom podpisujeme NDA. V\u0161etky inform\u00e1cie aj v\u00fdsledky zost\u00e1vaj\u00fa v\u00fdhradne medzi nami a vami. <\/p>\n<\/div>\n\n\n\n

\n<\/rect><\/path><\/svg><\/span>\n\n\n\n

S\u00falad s medzin\u00e1rodn\u00fdmi \u0161tandardmi<\/h3>\n\n\n\n

Metodol\u00f3gia vych\u00e1dza z OWASP, PTES a NIST a je v s\u00falade s NIS2 aj z\u00e1konom o kybernetickej bezpe\u010dnosti \u2013 teda s t\u00fdm, \u010do uzn\u00e1vaj\u00fa regul\u00e1tori aj aud\u00edtori.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n\n

\n
\n

\u010cast\u00e9 ot\u00e1zky<\/h2>\n\n\n\n
\n
\n