Speaker: Silke Menzel

NIS-2 has long been more than just another compliance issue: With personal liability for management, a 24-hour reporting requirement, and far-reaching supply chain security requirements, the directive is changing how companies must organize information security. This presentation takes a practical approach: What does Section 30(2) of the German Information Security Act (BSIG) specifically mean for a company’s catalog of measures? What requirements are imposed—ranging from risk analysis and incident response to business continuity (backup, recovery, crisis management) and supply chain security, all the way to cryptography, access control, asset management, and multi-factor authentication?

Current market figures based on this year’s surveys show how many ...