Law and consequences
What happens if I don't comply?
NIS2 director liability: what § 38 BSIG requires of management
Implement, oversee, train: management's three duties and how liability works under company law.
NIS2 fines: what § 65 BSIG provides for
§ 65 BSIG and Art. 34 NIS 2: which duty has which upper limit, when a percentage of turnover applies, and who decides.
Cyber insurance and NIS 2
What a cyber insurance policy actually covers against Article 21(1) NIS 2, and what it does not.
Personal liability of the management body under NIS 2
§38 BSIG plus §43 GmbHG and §93 AktG: the liability landscape in detail.
Supplier contracts: clauses for Art. 21(2)(d) NIS 2
Which contractual clauses Article 21(2)(d) NIS 2 expects, and which are not enough.
BSI notice: objection and judicial review
When the BSI issues a notice under §61 or §64 BSIG — deadlines, paths, consequences.
Fine procedure under §65 BSIG: how it runs
From the hearing letter to the notice — how the BSI calculates a fine.
Whistleblower reports about NIS 2 issues
The German Hinweisgeberschutzgesetz and NIS 2: how internal reports about compliance failures run.
Management body change — transferring NIS 2 responsibility safely
Three duties activating on appointment day: §33(5) BSIG registry update within 2 weeks, §38 BSIG training for the new member, Art. 20 NIS 2 approval continuity for existing risk acceptances.
Been asked to handle NIS2?
In the end you have everything in one document: what is done, what is still open, and your management's approval with name and date. The app writes the texts.
