PiXi Platform

The PiXi Platform is National platform for collecting, analyzing, and sharing data on cyber threats and incidents pursuant to Article 43. Cybersecurity Act (NN 14/2024, later in the ZKS document), Chapter IV. Cybersecurity Regulations (NN 135/2024, later in the document UKS) and Article 15. Law on the implementation of Regulation (EU) 2022/2554 on the digital operational resilience of the financial sector (NN 136/2024, hereinafter referred to as the DORA Regulation).

The PiXi Platform is a closed system intended for entities bound by the Cybersecurity Law, the DORA Regulation, competent authorities for implementing cybersecurity requirements, competent authorities for implementing specific laws, competent CSIRT bodies, and a single point of contact.

The development and management of the PiXi Platform are under the jurisdiction of CARNET.

• Key and important entities categorized as ZKS obligors and DORA Regulation obligors
• Competent authorities for implementing cybersecurity requirements:
  • Central State Cyber Security Body (Security Intelligence Agency)
  • Central State Information Security Body (Office of the National Security Council)
  • Agency for Network Activities (Croatian Regulatory Agency for Network Activities - HAKOM)
  • The state administration body responsible for the development of the digital society (Ministry of Justice, Public Administration and Digital Transformation)
  • The state administration body responsible for science and education (Ministry of Science, Education and Youth)
• Competent authorities for the implementation of specific laws:
  • The Croatian National Bank – HNB
  • Croatian Financial Services Supervisory Agency - HANFA
  • Croatian Civil Aviation Agency
• Relevant CSIRTs
• • CSIRT of the Central State Authority for Cybersecurity – National Cybersecurity Center (NCSC)
  • CSIRT of the Croatian Academic and Research Network – CARNet – National CERT

The user is a citizen who has been granted e-authorization to access the PiXi Platform on behalf of a legal entity to comply with legal obligations set forth in the regulation governing cybersecurity incident reporting.

All key and important entities have been provided with information about the prerequisites for applying to the PiXi Platform along with the Notice of Categorization. The information relates to the authentication and authorization process using NIAS system – through which the service is accessed.

Access to the Pixi Platform service requires prior obtaining of access rights from the legally authorized person representing the business entity through e-Authorizations.https://e-ovlastenja.gov.hr/To access the e-Authorizations service and the Pixi platform, a credential of at least a significant security level from the List of Accepted Credentials is required.https://gov.hr/hr/lista-prihvacenih-vjerodajnica/1792).

The entire process is described in detail in the document. Instructions for accessing the PiXi Platform.

Opening hours every day (Monday to Sunday) from 8 AM to 8 PM.