Check whether your organisation is in scope, identify the most important gaps and get an executable action plan before compliance becomes an operational problem.
We combine 30+ years of hands-on IT experience with risk management, business continuity and technology delivery. We do not start by selling tools: we start with scope, risk and business priorities.
On-site: Wschowa · Sława · Leszno · Głogów area | Remote: across Poland
Independent advice · Confidentiality · PL / EN / DE · Local and remote
Experience in environments where IT continuity has direct business impact
If your organisation meets the criteria for an essential or important entity, qualification and implementation should not be postponed. We start with a concise scope and risk review.
Dates apply to entities covered by the amended Polish KSC Act; qualification depends on the specific organisation.Three focused entry services establish facts, risk and the next scope without forcing a long engagement at the outset.
For organisations asking the first question: “does KSC apply to us and what do we need to do now?”
For owners and boards who need an independent view of material IT, security and supplier risks.
For organisations that have backups and procedures but are not sure critical services can actually be recovered.
We do not start by buying tools. We first establish scope, current state and risk, then build an executable plan of organisational, technical and documentation changes.
We assess the organisation profile, critical services and processes, dependencies, and where KSC/NIS2 requirements materially affect the business.
We review governance, risk, access, backup, supplier security, incident response, business continuity and the key security controls protecting the environment.
You receive a gap and risk register, 30/60/90+ priorities, action owners, dependencies, budget guidance and an executive view of the most important risks.
We implement or oversee policies and controls: IAM/MFA, backup, segmentation, EDR/XDR, logging, SIEM/SOC, BCP/DRP, testing, training and supplier oversight.
We match solutions to risk and company scale. Where SOC, SIEM, EDR/XDR, backup, cloud or specialist testing is needed, we help select the right solution or delivery partner and oversee implementation on the client side.
We restore visibility, accountability and control where technology affects financial performance, reputation and business continuity.
We structure the IT governance model, roles, priorities, suppliers and the way technology risk is reported to leadership.
We identify material ICT risks and build an action plan supporting NIS2, DORA, ISO 27001 and audit requirements.
We validate critical processes, dependencies, backup, RTO/RPO, recovery scenarios and the practical readiness of BCP/DRP arrangements.
We restore oversight of change portfolios, budgets, scope, quality, architecture and supplier commitments.
We create the greatest value where IT is critical, regulated, complex or needs to be stabilised before the next stage of growth.
An independent view of IT risk, cost, priorities and accountability — expressed in language that supports business decisions.
Support for companies addressing NIS2, DORA, audits, cybersecurity improvement and operational resilience.
Governance of change, projects, suppliers and architecture during growth, reorganisation, migration or stabilisation.
From strategy and governance to architecture, implementation, documentation and oversight of critical environments.
IT strategy, operating model, accountability, KPI/KRI, budget, sourcing, supplier governance and periodic support as a vCIO or Interim IT Manager.
Risk assessment, gap analysis, policies and procedures supporting NIS2, DORA and ISO 27001, access governance, supplier security and audit readiness.
BIA, critical service identification, RTO/RPO, recovery strategies, BCP/DRP plans, testing scenarios and continuous resilience improvement.
Delivery and recovery of projects, cross-functional coordination, requirements, infrastructure and cloud architecture, migrations, DevOps, and control of scope, cost and quality.
Selection and delivery oversight for MFA/IAM, EDR/XDR, SIEM/SOC, backup, network segmentation, privileged access, monitoring and protection of hybrid environments.
Cloud and hybrid architecture, Azure, automation, DevOps, practical AI adoption and infrastructure modernisation — with security, cost and operational resilience under control.
IT Strategy · Governance · Delivery · Security
IT Navigator is led by Przemysław Maliński, an independent IT consultant active since 1994. His background spans Microsoft infrastructure, IT projects and programmes, cloud and hybrid environments, governance, security and business continuity.
Recommendations follow risk, requirements and organisational reality — not the need to sell a particular licence.
We connect infrastructure and operations with delivery, risk, budgets, suppliers and executive decision-making.
The plan has owners, priorities, dependencies and a delivery sequence. Documentation is a means, not the outcome.
We clarify business objectives, accountability, critical services, risks, dependencies and the actual maturity of the IT environment.
We build a risk map, target operating model, initiative sequence, ownership, measures and a realistic delivery roadmap.
We implement or oversee organisational, technical and documentation changes while protecting day-to-day operations.
We introduce reporting, reviews, tests and continual improvement mechanisms so that results remain effective after the engagement.
Leadership receives a clear view of risk, cost, priorities and accountability instead of fragmented technical information.
Material security, compliance and supplier gaps are identified, assessed and covered by a defined treatment plan.
Critical services, dependencies, RTO/RPO, backup and recovery procedures become consistent, testable and continuously improved.
Projects, architecture, budgets and suppliers are governed through agreed principles, measures and expected outcomes.
Choose a topic and briefly describe the situation. The form prepares an email to IT Navigator without sending your data to a third-party form service.
Direct contact:
Show email address
