Contents
Legal requirements for the IT security of companies as of today
- Acquisition of comprehensive insights into the requirements and obligations for IT security based on the currently applicable laws, in particular the BSI Act, the GDPR and the KontraG.
Contents of the EU NIS2 Directive
- Objective and scope of the EU NIS2 Directive.
- Risk management obligations, documentation and reporting.
- Personal liability of managers due to extended cyber security obligations.
- Timetable for implementing the directive.
Contents of the NIS2UmsuCG
- Germany's cyber security strategy, central contact points for cyber security and establishment of computer emergency response teams (CSIRT) and extended tasks for the BSI.
- Scope of the law: size, turnover, sectors and thresholds.
- Risk management measures, reporting and notification obligations.
- Liability, in particular personal liability of managing directors and board members.
- Statements from associations and political groups.
- Timetable for the application of the new law.
Practical application
- Application of the acquired knowledge using examples.
Improving the IT security strategy
- Support in the development or improvement of your organization's IT security strategy in accordance with the NIS2 directive and the NIS2UmsuCG.
Networking and exchange of experience
- Opportunity to exchange ideas with subject matter experts and colleagues from various industries to share insights and experiences.
Preparation for future developments
- Raising awareness of current legislative developments in the area of information security in order to be able to react actively to changes.
Learning environment
In your online learning environment, you will find useful information, downloads and extra services for this training course once you have registered.
Your benefit
Updated knowledge:
- Understanding of the latest EU regulations and planned national regulations in information security. Systematic understanding of how the new standards fit into the network of current and planned IT security requirements of European and German legislators.
Compliance fulfillment:
- Knowledge of compliance with the legal requirements of the NIS2 Directive and the NIS2UmsuCG; differentiation from data protection regulations.
Practical implementation strategies:
- Learn effective approaches for implementing the NIS2 requirements in your own company.
Network expansion:
- Opportunity to exchange ideas with industry experts and like-minded people.
Methods
Lecture and presentation, specific case studies, practical design tips, answers to questions.
Recommended for
The training is aimed at IT security experts and officers, IT information and compliance officers, risk managers and executives, especially from areas such as critical infrastructures or companies with more than 50 employees or an annual turnover of more than 10 million euros.
Seminar evaluation for "NIS 2 Directive and NIS2UmsuCG"
36435
Start dates and details
Tuesday, 18.11.2025
09:00 am - 5:00 pm
Friday, 20.03.2026
09:00 am - 5:00 pm
- one joint lunch per full seminar day,
- Catering during breaks and
- extensive working documents.
- one joint lunch per full seminar day,
- Catering during breaks and
- extensive working documents.
FAQ on the training NIS 2 Directive and NIS2UmsuCG
Who is affected by the NIS 2 Directive?
The NIS 2 Directive affects companies that are considered critical infrastructure. The training helps you to understand whether your company is one of them and which specific requirements need to be implemented.
What are the main changes to the NIS 2 Directive?
The changes include extended reporting obligations and higher security requirements. The training teaches how these new requirements can be implemented in a legally compliant manner.
Why is the NIS 2 directive important for my company?
The directive protects critical infrastructures from cyber attacks. The training shows how companies can be better protected through compliance guidelines and security measures.
When do security incidents have to be reported?
The reporting deadlines have been shortened and are binding. The training explains how to set up an efficient reporting system in order to meet deadlines and avoid penalties.
How do I create a security strategy in accordance with NIS 2?
In the training , you will learn methods for developing a security strategy that meets the legal requirements and is also practical.
What are the biggest challenges in implementing the NIS 2 Directive?
The challenges often lie in adapting existing systems. The training offers concrete solutions to close security gaps and ensure compliance.
About us - The Haufe Akademie
Your optimizer, innovator and companion since 1978 -
Your professional partner for professional development and seminars, training courses and topical conferences.
Whether on site, live online or in-house - our customised solutions, our claim to the highest level of consulting expertise and training tailored to your needs simplify the acquisition of skills for the working world of the future and sustainably facilitate professional development.
A wide range of seminars, individual coaching and our flexible formats support HR managers and decision-makers in shaping the future and developing employees, in-house teams and companies.
Experience the benefits of online training from the comfort of your own home. Our online formats meet the highest quality standards and are in no way inferior to face-to-face events in terms of practical relevance. Learn together live online in interactive groups or digitally at a time of your choice.
Do you have any questions?
We are there for you Monday to Friday 8:00 a.m. - 5:00 p.m.
Questions & Answers
In our Questions & Answers (FAQ) section, you will find all the answers and the most frequently asked questions about your selected topic.
Munzinger Str. 9
79111 Freiburg
- Planning security
- Free seminar places
- Quality standards
- Planning and locations
- Funding opportunities
- Training app
- Business Solutions
