Poland's new cyber‑security law spurs demand for real SOC services

On 3 April 2024 Poland enacted a revision of the National Cybersecurity System (KSC) law, aligning with the EU NIS‑2 directive. The amendment makes board members personally liable for cyber‑security failures and extends strict requirements to roughly 38 000 key entities and their supply‑chain partners, including banks, hospitals and utilities.

In response, Orange Polska launched a Dynamic SOC service for medium‑ and large‑size firms. The offering combines detection, response and 24/7 monitoring using EDR, XDR and SOAR technologies, proprietary threat feeds, a dedicated Polish‑language portal and monthly security reports. The service, already operating in seven other countries, protects over 3 000 clients and nearly 4 million devices.

Both the regulatory change and the new commercial solution aim to help Polish companies meet the heightened obligations and avoid multi‑million‑złoty penalties for inadequate cyber‑defence.