Page History

• Education is regulated by local law (based on NIS2).
• Cesnet officially in scope (provider of infrastructure).
• The law has not yet been approved by the Czech Parliament, but it will regulate more than it does now.
• Law will define two certs (governemetal and national).

• Still no answer from ministry (Education and Science).

• Information on NIS2 now mainly about universities and universities for applied sciences.

• As NREN still not clear if in scope or not. CERT task a lot of debate in the Netherlands.

• If large part of the sector will be under NIS2 SURFCERT will also.

• Same situation as in the Netherlands.
• There is a trend that education will not fall under the regulations (but research organisation would → only higher education and not schools).
• Critical infrastructure only networks that are available for the public (not DFN)
• But also companies in the telecom that have annual budget over 50million euros a year they will fall under regulation
  • Not clear if DFN is a company, because they are non-profit organisation.
  • Not sure if applied to commercial purposes (if research organisations always in scope or only for commercial purposes)

• For DFNCERT: it doesnt say anything about sector CCERTs. It only talks about BSI.

João Nuno Ferreira