The EU's NIS2 Directive significantly expands the framework for cyber security and now affects companies in various sectors. They must tighten their security measures, report cyber incidents within 24 hours and fear high fines of up to €10 million for breaches. An exclusive study by Mimecast and Computerwoche reveals alarming gaps: 88% of German companies do not know whether they are affected and only 17% are aware of the liability risks for management. 
Which companies are affected, what measures need to be taken and what reporting obligations need to be observed - Alexander Peters, Senior SE Manager at Mimecast, sheds some light on NIS-2.