Industrial efficiency and compliance

Just B — industrial IT, supply chain and regulatory compliance advisory

Let option 'A' . just B.

One site visit, one process map, one evidence base. From it come leaner operations and auditable compliance, in Hungarian and Slovak.

Own platform · the Just B advantage

B Skep – Assurance Engine

We work on our own platform. It links requirement, risk, control, evidence and test in one database and generates the documents from it. That makes the work faster and more consistent than doing it by hand, and the next audit starts from a delta review, not from scratch.

The platform prepares, people decide: the head of the organisation approves the classification, an independent lawyer gives the legal opinion, and an expert reviews every document.

You don't need to buy or roll out any software. You receive the results: editable Word and Excel files, registers and a machine-readable audit report. Every result is yours, in standard formats, usable independently of the platform.

REQRISKCTRLEVIDTST

Which one applies to you?

I operate in a critical sector or supply a company that does.NIS2 · IT-OT → I make or sell machines, devices or apps that contain software.CRA → We use or develop AI-based tools.AI Act → I want to cut waste and cost.LEAN →
Services

One method.
Four outcomes.

We walk the site once and work from the same process map and evidence base in all four areas. You don't have to buy everything at once: we start with what affects you now.

From design to operation

Advisory ends where
the system starts running.

01
System design and specification

Mapping requirements against actual processes, then the specification a quotation can be requested and delivery measured against.

02
Implementation and project management

Running the implementation to schedule, milestones and clear responsibilities — on both the supplier and internal side.

03
Integration with existing systems

Fitting the new system into the existing chain of ERP, production control and technical data management, with data structures and handover points.

04
Ongoing operation

Beyond handover: support at an agreed service level, so the system still runs as designed in its second year.

Delivery runs with our own team or with a partner, depending on the project — accountability and oversight stay with us either way. If the client only needs the decision prepared, we stop there; if they need a working system, we hand that over too.

Let us talk about the project
Industrial cyber security

The office incident ends on the production line.

Office IT lives three to five years and updates monthly. A machine controller lives fifteen, often with no patch available at all. At most manufacturers they still share one network — and almost always at the same four points.

01Remote maintenance accessOpened for the machine supplier at commissioning. Never reviewed since.
02Shared networkRansomware arriving by email reaches production control unobstructed.
03Supplier accessGranted, rarely revoked. NIS2 asks about this explicitly.
04The untested backupThe report is green. Whether it restores, and how fast, shows in the real event.
AI Act · new

AI is part of the assessment. Same method.

Alongside NIS2, IT-OT and LEAN we now cover the EU AI Act. AI systems go into the same register as your information systems, and compliance rests on evidence in the same way.

already applies
Prohibited practices, AI literacy, transparency
since February 2025 and August 2026
2 Dec 2027
High-risk AI (Annex III)
for example recruitment and workplace evaluation
2 Aug 2028
AI in machinery (Annex I)
where the AI performs a safety function on the shop floor

Our NIS2 self-test (in Hungarian) now includes three AI questions: inventory and classification, human oversight, suppliers and OT.

Talk to us
Product compliance · CRA and product liability

If your machine runs software, the rules apply to your product too.

NIS2 regulates the organisation; the Cyber Resilience Act (CRA) regulates the product: the machine with a control system, the app you give customers, the network device you resell. Under the new product-liability rules software is a product, and a missing security update can count as a defect. Products go into the same register and rest on the same evidence base.

11.09.2026 · already applies
CRA reporting within 24 hours
actively exploited vulnerabilities and severe incidents, also for products already on the market
09.12.2026
New product liability
software and updates are products; also relevant for machines retrofitted in-house
11.12.2027
CRA full application, CE marking
essential requirements, SBOM, technical documentation, declaration of conformity
Who is affected?

Machine builders, suppliers who deliver software or apps, and importers reselling devices from non-EU manufacturers.

What do you get?

Product inventory and CRA classification, a vulnerability-handling and reporting process, a product-liability risk review and a supplier questionnaire.

How does it connect?

One incident can trigger both a NIS2 and a CRA notification. We handle both from one log, and the same evidence protects you in a product-liability claim.

Scope and classification are product-specific; the legal opinion is given by an independent lawyer.

LEAN and compliance

Cutting waste helps pay for compliance.

Our economic impact simulator calculates the five-year profit and cash-flow effect quarter by quarter. Its default assumptions:

−2%
material cost through scrap reduction (LEAN)
+6%
productivity (LEAN)
−10
inventory days, freeing working capital
−70%
outage days in an incident with NIS2 readiness

These are model assumptions, not guaranteed results. In the diagnostic we use your own figures.

Free starting points

Find out where you stand in minutes.

About 5 minutesLEAN waste calculatorPuts a monetary value on the main sources of waste in your operation.Start → About 4 minutesNIS2 + AI self-test (HU)15 questions across seven areas with an overall score. The per-area breakdown is sent on request.Start → About 5 minutesVulnerability quick checkA quick picture of the most common weak points across IT and OT.Request →

The calculator and the self-test run in the browser without sign-up; the vulnerability quick check is available on request. They give an estimate, not an official assessment.

Industries

Where we have
the most experience.

Machine building

Just as secure as it can B

Machines with control systems fall under the CRA and new product liability, and from 2027 the Machinery Regulation. On the shop floor: LEAN and NIS2.

Automotive supplier

Just as precise as it can B

Customers ask for NIS2 compliance in supplier questionnaires; LEAN and IT-OT security on the line, AI tools in quality management.

Food processing

Just as reliable as it can B

NIS2 explicitly covers the sector. Outages in cooling and production OT systems mean direct production loss.

Energy and utilities

Just as resilient as it can B

A highly critical sector under NIS2. Systems often fall into a higher security class, which means more measures and penetration testing.

About

Why
Just B?

Our mission

Our aim is to use our experience and integrated approach to help manufacturing and supplier SMEs, primarily in Hungary and Slovakia, operate efficiently and compliantly at the same time. From a single site visit, we deliver Lean improvement, NIS2, CRA and AI Act compliance, and an auditable evidence base, using evidence-based, field-tested methods, processes and tools, without legal jargon.

Our vision

We believe that Central European manufacturing SMEs can be competitive both at home and in international markets. Our vision is for our clients, primarily in Hungary and Slovakia, to make internationally proven manufacturing, process improvement and financial evaluation methods part of their everyday practice, and to treat regulatory compliance as an integral part of the same way of working. And to get there, they choose the adviser that is just as effective as it can B: Just B.

We don't fill in templates. We generate the documents from your data on our own platform, and an experienced expert approves every decision. For every task we find the specialist and the solution best suited to the problem. The client's objective is the only metric.

DirectNo intermediary layer between client and decision.
ExperiencedISO 9001, defence industry licensing, Six Sigma green and black belts.
Results-drivenThe client's goal is the metric, not the consulting hour.
FlexibleAdvisory, full design-and-delivery projects, or ongoing engagement.
Contact

Let's start.

A short call is all it takes. Write to us and we will respond shortly.

  1. 0130-minute call
  2. 02Free self-test review
  3. 03Written proposal with timeline

Useful to have ready: headcount and revenue, a list of your main IT and OT systems, and the completed self-test if you have one.

info@just-b-ltd.com