Businesses May Be Granted a Six-Month Extension to Complete Mandatory Cybersecurity Audits, SZTFH Announces Proposal
Businesses May Be Granted a Six-Month Extension to Complete Mandatory Cybersecurity Audits, SZTFH Announces Proposal
In a statement released on May 5, 2025, SZTFH announced its proposal—developed in cooperation with the Hungarian Chamber of Commerce and Industry (MKIK)—to extend the deadline for completing the mandatory cybersecurity audit.
According to the proposal, affected businesses would be granted an additional six-month grace period, pushing the new compliance deadline to June 30, 2026. However, it is crucial to note that companies must enter into a contract with an officially registered auditor no later than August 31, 2025. The proposed extension aims to provide organizations with sufficient time for preparation while ensuring the efficient allocation of available auditing resources.
The collaboration between MKIK and SZTFH is not new; the two organizations have previously worked together on the domestic implementation of the NIS2 directive, with a particular focus on reducing the administrative and financial burdens placed on businesses. This time, the emphasis is on adjusting the compliance timeline in response to feedback from the business community and current market conditions.
SZTFH has submitted a request to the Government to amend the relevant legislation, so the proposed extension can be formally enshrined in law.
Source: SZTFH