Croatia
Croatian manufacturers, IT companies and service providers increasingly hold ISO 9001 and ISO 27001 - often both - for EU customers and tenders. Croatia was also among the first Member States to transpose NIS2. Kellwick provides implementation, integrated management systems, independent internal audits and ongoing support, with NIS2 readiness where it applies.
Buyers
Local context
Context for scoping, not legal advice. Whether a law applies to you depends on your entity type, sector and size; where a formal legal position is needed we work alongside your counsel.
Croatia transposed NIS2 in 2024 through the Zakon o kibernetičkoj sigurnosti and its implementing regulation. Applicability depends on sector and size; in-scope entities face risk-management measures and incident reporting.
ISO 9001:2026 was published on 16 September 2026, with a three-year transition for certified organisations ending 30 September 2029.
Last verified 16 October 2026 against European Commission - NIS2 and EUR-Lex - Directive (EU) 2022/2555.
Last verified 16 October 2026 against Global ACI - ISO 9001:2026 transition and ISO - ISO 9001.
Services
Delivery
Sectors
Questions
Yes. An integrated audit programme covers both standards in one plan, while still sampling each standard's own requirements.
All certificates must transition by 30 September 2029, and new certifications are issued only to the 2026 edition from 31 March 2028. In practice the move is best planned around your next recertification audit.
The standards, the sites and the deadline are enough to start. A specialist replies within one business day and confirms whether the work is remote, onsite or both.
Kellwick is an independent consulting and internal audit practice. We are not a certification body and do not issue ISO certificates. Certification decisions are made only by accredited certification bodies.