PPHS’ Cybersecurity Standard

1. Why was the Standard established?

Because of the increasing scale of Internet attacks, both SMEs and public institutions are exposed to a plethora of new types of threats that they must combat expertly. Furthermore, with the implementation of the European Union’s General Data Protection Regulation (GDPR), all businesses and institutions are required to properly protect data that is mostly processed electronically. As a result, solutions that would assist in achieving an appropriate level of security are still being sought.

The Polish Platform for Homeland Security examined available standards and concluded that there is no standard dedicated to SMEs and public information. The most well-known ISO 27001 Standard – Information security management – is intended for large organisations with specialised security teams. In fact, smaller organisations lack the tools necessary to combat cyber threats effectively.

As a result, we decided to change the current situation and create our own Cybersecurity Standard. PPHS used experience gained both during the implementation of international standards (ISO 27001, ISO 37001) and the development of new ones to accomplish this (PPHS is a member of working groups associated with the Polish Committee for Standardisation and also cooperates with the European Committee for Standardisation). The goal from the start has been to provide a standard that is useful, easy to use, and does not take too much time.