NIS 2 Directive and NIS2UmsuCG

Legal requirements for the IT security of companies as of today

• Acquisition of comprehensive insights into the requirements and obligations for IT security based on the currently applicable laws, in particular the BSI Act, the GDPR and the KontraG.

Contents of the EU NIS2 Directive

• Objective and scope of the EU NIS2 Directive.
• Risk management obligations, documentation and reporting.
• Personal liability of managers due to extended cyber security obligations.
• Timetable for implementing the directive.

Contents of the NIS2UmsuCG

• Germany's cyber security strategy, central contact points for cyber security and establishment of computer emergency response teams (CSIRT) and extended tasks for the BSI.
• Scope of the law: size, turnover, sectors and thresholds.
• Risk management measures, reporting and notification obligations.
• Liability, in particular personal liability of managing directors and board members.
• Statements from associations and political groups.
• Timetable for the application of the new law.

Practical application

• Application of the acquired knowledge using examples.

Improving the IT security strategy

• Support in the development or improvement of your organization's IT security strategy in accordance with the NIS2 directive and the NIS2UmsuCG.

Networking and exchange of experience

• Opportunity to exchange ideas with subject matter experts and colleagues from various industries to share insights and experiences.

Preparation for future developments

• Raising awareness of current legislative developments in the area of information security in order to be able to react actively to changes.