Ing. Tibor PoštekCourt Expert
Court Expert – Security and Protection of Information Systems Field 10 10 00
Has data leaked, has someone got into your company system, or do you need independent proof that your system is secure? I assess which measures are missing or failed, and explain it in a way that both company management and a court can understand. For companies, lawyers and insurers.
System security, access to systems and data protection
I answer technical questions only. Under Decree No. 228/2018 Coll., field 10 10 00 is divided into three areas, which overlap in practice.
A) Information system security
Decree: “the security aspects of information systems”
- security architecture and configuration
- security policies and their enforcement
- compliance with documentation and ISO standards
- measures promised by a supplier or an insurer
- statement before a tender, contract or insurance
Did the security measures match the documentation, and were they actually in place and functional at the relevant time?
B) Protection against unauthorised access
Decree: “protection against unauthorised access to the system”
- accounts, roles and access rights
- passwords and two-factor authentication
- privileged and administrator accounts
- access of former employees and suppliers
- logs and audit records: who, when, what
Did unauthorised access occur? When, through which account, and which protective measure failed?
C) Data protection and backup
Decree: “protection of data against misuse or loss, backup”
- encryption and permissions for sensitive data
- backups, backup isolation and recovery tests
- extent of data affected after an incident
- integrity of documents and emails
- email delivery according to server records
Was the data protected against leakage and loss? Could it be restored from backups?
What you can approach me with
For each of the three areas, four model situations and the questions that can be put to the expert. I will help you formulate them so that a clear answer exists.
A) Information system security
- Security before a tender. A cloud system supplier is bidding for a contract and the contracting authority asks for proof of how access and data are protected.Does the system's security match the documentation and international ISO standards? Which measures are missing or not functional?
- Insurer's condition. A company is taking out cyber insurance and the insurer asks for independent confirmation that backups are isolated and logins are protected by two-factor authentication.Are the declared measures actually in place and functional? Do the backup and user authentication match what the company states in the insurer's questionnaire?
- Measures the supplier promised. The contract provided for data encryption and multi-factor authentication. After a data breach, the client claims they were never implemented.Were the agreed measures actually in place and functional at the time of the breach?
- Supplier's remote access. The contract allowed the external administrator access only on request and with logging. After an incident, it turned out the access was permanent.Was the supplier's access restricted and logged as the contract required? Can the records show what was done through this access?
B) Protection against unauthorised access
- Access without authorisation. An employee viewed colleagues' salaries and health data, although they should not have had access to them.Were accounts and permissions set up appropriately? Did the system allow them to reach the data?
- Former employee. A sales representative kept logging into the CRM for a week after leaving and downloaded the client list.Was the account blocked after the employment ended? When and from where did they log in?
- Shared administrator password. Five IT staff used a single administrator account. After the database was deleted, nobody knows who did it.Did the audit records make it possible to establish retrospectively who performed the operation and when?
- Compromised company mailbox. Someone logged into the accountant's mailbox and set up forwarding. A business partner received an invoice with a different account number.Was the mailbox protected by multi-factor authentication? Can the records reveal the foreign login and how long it lasted?
C) Data protection and backup
- Failed backups after ransomware. The backups were on the same storage as the production data and the attack encrypted them too. The insurer is handling the claim.Was a functional backup and recovery mechanism in place? Were the backups isolated from the production environment?
- Customer passwords in plain text. A database leaked from an online shop and it turned out that passwords and card numbers were stored unencrypted.Was customer data protected in a way that matched the common standard? Which measure was missing?
- Altered invoice in the system. An invoice with a changed account number appeared in the accounting system. Someone edited the file and uploaded it back, and the company paid into a foreign account.Who had permission to change the document? Who changed it and when, according to the records? Did the system log document changes so that they could be traced retrospectively?
- Disputed email. The other party claims it never received the email with the notice of termination, or that its content was altered afterwards.Was the email sent and delivered to the server? Was its content left unaltered? Who had access to the mailbox?
Education and experience
Because technology evolves so quickly, I consider it a matter of course to keep deepening my expertise and following new trends.
-
2016 – 2018
Bc. – Computer Science, Ing. (Master's) – Information Systems
Faculty of Management Science and Informatics, University of Žilina
-
since 2018
Software engineer – development of complex information systems
Insurers, ministries, private companies.
-
since 2022
Co-founder and CTO of the Stribog platform
Responsible for technology and information security
-
since 2025
Law – studies alongside practice
Faculty of Law, Pan-European University, Bratislava
-
2026
Court expert – Security and Protection of Information Systems registered
Ministry of Justice of the Slovak Republic · field 10 10 00, reg. no. 916198
-
2026
Cybersecurity Manager training completed
TÜV SÜD, under Act No. 69/2018 Coll. on Cybersecurity
-
2026 – 2027
Court expert – Software exam passed registration 2027
Examination passed at the Ministry of Justice of the Slovak Republic in June 2026. Registration upon completion of specialised training at the Slovak University of Technology in Bratislava.
Frequently asked questions about expert opinions
Can you assess the security of our system even if there is no dispute?
Yes. Companies commission an independent expert statement before a tender, before signing a contract or at the request of a customer or insurer. You can present it to your customer or use it later in a dispute.
How is an expert opinion prepared?
We go through your questions and agree on the documents, the fee and the deadline. You receive an expert opinion with all formal requirements and the expert's declaration, and I can defend its conclusions in court.
Who can commission an expert opinion?
A company directly, a lawyer on behalf of a client, or an insurer. In court proceedings, the court appoints me as the expert and sets the questions.
Will you help me formulate the questions for the expert?
Yes, and I recommend doing so before the assignment is set. The questions must be technical, not legal, and there must be a clear answer to them in the records. I work for both sides of a dispute.
Do you also assess insurance claims?
Yes. In cyber insurance claims I assess whether the measures required by the policy terms were in place and functional, how the data was protected and whether it could be restored.
What documents will you need?
Typically logs and system records, technical documentation, security policies and contracts with suppliers. Everything comes from your own systems; I do not disrupt your operations. We agree on the exact list when the assignment is set.
How do you handle sensitive materials?
I am bound by a duty of confidentiality. We agree in advance on a secure way to hand over the materials.
How much does an expert opinion cost?
The fee is set by agreement according to the scope of the questions and documents, and we agree on it before work begins. For simpler cases, a shorter expert statement is sufficient. When I am appointed by a court, the expert fee is governed by Decree No. 491/2004 Coll.
Get in touch as soon as possible
System records are overwritten within a few weeks. Briefly describe what happened and I will tell you, with no obligation, how to proceed.
- tibor@postek.sk
- Phone
- +421 915 24 79 79
- Area of practice
- All of Slovakia, also online