ShieldNet
ENPL

Free and open standard

Cybersecurity made doable for small organizations

ShieldNet turns Europe's cybersecurity rules into 48 practical controls, with free tools, templates and training. Built for SMEs and NGOs, with no license fees and no consultant required.

Get the StandardSee how it works

Critical work, limited resources

Small and medium organizations run services that others depend on, often without a dedicated security team. Rules like NIS2, GDPR and the Cyber Resilience Act apply to them too, yet most frameworks are written for large enterprises. ShieldNet gives you a path that matches your size and your real risk, in plain language you do not need a specialist to follow.

Three programs, one foundation

How to adopt the standard

A clear path from first check to certification. Start wherever you are.

  1. Check what applies

    Use the free Compliance Checker to see where you stand against NIS2, GDPR, the Cyber Resilience Act and the AI Act.

  2. Get the Standard

    Download the full standard and templates. Free, with no registration required.

  3. Set up your management system

    Put the Cybersecurity Management System in place, your simple, risk based way to run and prove security.

  4. Apply the five Action Zones

    Work through the 48 controls across KNOW & PLAN, SHIELD & BUILD, WATCH & PATCH, REACT & RECOVER and LEARN & LIFT.

  5. Add your sector pack

    Layer on extra controls for your sector, from healthcare to ecommerce, education, water and heating.

  6. Train your team

    Use the free Core Training to give everyone the basics, then build toward professional roles.

  7. Get certified

    Show your progress with ShieldNet certification, from a free self-assessment to independent assessment.

What is in the framework

Everything fits together, held in place by one management system.

Cybersecurity Management System

The Cybersecurity Management System binds the whole framework into a working system. It is also our answer to a real legal duty. The Polish implementation of NIS2 requires a security management system, and ShieldNet gives you a simple alternative to a full ISMS, based on risk and on OKRs.

  • KNOW & PLAN

    Know your assets, risks, and obligations, and plan ahead for security.

  • SHIELD & BUILD

    Shield your technology and build it strong, keep attackers out from the start.

  • WATCH & PATCH

    Watch for signs of trouble, and patch problems quickly to stay secure.

  • REACT & RECOVER

    React fast when incidents strike, and recover to business as usual quickly.

  • LEARN & LIFT

    Learn from every experience and lift your cybersecurity maturity continuously.

Sector packs add depth for healthcare, ecommerce, education, water and heating. Annexes give you ready templates, a legal matrix and more.

Free tools to get you moving

Open, free, and run as a non-profit

ShieldNet is run by Fundacja ShieldNet, a Polish non-profit foundation. The standard, the tools and the Core Training are free and open. The foundation funds its work from exam and certification fees, partner and license fees, grants and donations, and all income goes back into its mission.

We use AI openly to help a small team do more. People stay responsible for everything we publish. How we use AI

Work with ShieldNet

Training providers, consultancies, managed service providers and assessment bodies can join the Partner Program. The terms, criteria and prices are public and the same for everyone, and no partner gets exclusivity or a say over the standard or certification decisions.

See the Partner Program

Start with the standard. It is free.

Get the StandardCheck what applies to you