Law and consequences
What happens if I don't comply?
Director liability under §38 BSIG
Personal liability of management — what you actually owe.
NIS 2 fines
§65 BSIG and Art. 32 NIS 2 — amount, calculation, procedure.
Cyber insurance and NIS 2
What a cyber insurance policy actually covers against Article 21(1) NIS 2, and what it does not.
Personal liability of the management body under NIS 2
§38 BSIG plus §43 GmbHG and §93 AktG: the liability landscape in detail.
Supplier contracts: clauses for Art. 21(2)(d) NIS 2
Which contractual clauses Article 21(2)(d) NIS 2 expects, and which are not enough.
BSI notice: objection and judicial review
When the BSI issues a notice under §61 or §64 BSIG — deadlines, paths, consequences.
Fine procedure under §65 BSIG: how it runs
From the hearing letter to the notice — how the BSI calculates a fine.
Whistleblower reports about NIS 2 issues
The German Hinweisgeberschutzgesetz and NIS 2: how internal reports about compliance failures run.
Management body change — transferring NIS 2 responsibility safely
Three duties activating on appointment day: §33(5) BSIG registry update within 2 weeks, §38 BSIG training for the new member, Art. 20 NIS 2 approval continuity for existing risk acceptances.