NIS 2 – Implementation of the new EU directive on cybersecurity

With the NIS 2 Directive (Network and Information Security Directive 2), the European Union is tightening its cybersecurity requirements for critical and important institutions. The aim is to harmonize the level of security in all member states and significantly increase resilience to cyberattacks. In the future, companies, public authorities, and organizations will have to implement more comprehensive technical, organizational, and reportable security measures.

This seminar provides practical and application-oriented information on the legal basis, implementation strategies, and best practices for NIS 2 compliance.

Schwerpunkte

• Introduction: Background, objectives, and scope of NIS 2

• Affected sectors and classification into important and essential facilities

• Obligations and responsibilities under NIS 2

  • State-of-the-art security measures

  • Reporting obligations in the event of security incidents

  • Management responsibility and liability issues

• National implementation (German NIS2UmsuCG)

• Interfaces with ISO 27001, BSI basic protection and other standards

• Integration into existing information security management systems (ISMS)

• Practical implementation:

  • Risk analysis and management

  • Governance structures

  • Incident response & business continuity

• Best practices and practical implementation examples

Lernziele

• Clear guidance on the requirements and implications of the NIS 2 Directive

• Understanding whether and how your own company is affected by the directive

• Overview of necessary organizational, technical, and personnel measures

• Knowledge of liability risks, reporting obligations, and supervisory powers

• Practical implementation aids for preparing for audits and compliance checks

• Classification of NIS 2 in conjunction with CRA, GDPR, and ISO 27001

ZielgruppenIT security officers, CISOs, compliance managers, Managing directors and decision-makers in affected organizations, IT managers, data protection officers, risk managers