Vyhláška MD SR č. 111/2026 Z. z., Transport Sector Security Measures
In force since .
A sector security regimes rule binding public and private bodies.
- Obligation class
- Security
As of .
What it requires
- If you are an essential service operator in rail or road transport under Act 69/2018 on cyber security, apply the sector security measures in Annex 1 (rail) or Annex 2 (road) of this decree as part of your security measures (§ 1).
These lines are LexLint's reading of the law's text, as of .
In the frameworks
- NIST CSF 2.0
- GV.OC-03Legal, regulatory, and contractual requirements regarding cybersecurity - including privacy and civil liberties obligations - are understood and managed
Our reading of where this law's duties sit in each framework. It never says that running a control meets the law. How we read a framework against the law
If you get it wrong
Criminal exposureNo
Private right of actionNo
Criminal exposure note
The decree creates no offence and sets no penalty of its own; sanctions are those of Act 69/2018.
Who enforces it
Enforcement body
Národný bezpečnostný úrad (National Security Authority), the authority that issues the decree under Section 32(1) of Act 69/2018 and carries out the supervision the Act provides.
Settledness
- As of
What this law does
Decree 111/2026 of the Ministry of Transport (Vyhláška Ministerstva dopravy Slovenskej republiky) sets the sector security measures in the Ministry's remit, was approved on , promulgated on and took effect on . Section 1 sets the sector cyber security measures for rail transport in Annex 1 and for road transport in Annex 2. The Ministry issues the decree in cooperation with the National Security Authority under Section 32(2) of Act 69/2018.
When LexLint raises it
When your app profile says your app runs an essential service.