The NIS 2 Directive poses new challenges for companies and public authorities: For around 30,000 organizations, NIS 2 means regulation in network and information security for the first time. There is still a great deal of uncertainty, as NIS 2 has yet to be transposed into national law. This means that many details and questions remain unanswered. However, we want to shed light on the questions that can already be answered in a Q&A at it-sa.