Troubleshooting
What to do when something goes wrong?
NIS2 registration: how to register your company with the BSI
The steps through ELSTER and the BSI's portal, the deadline, what comes after registration and what to do if you missed the deadline.
Ransomware attack — what to do immediately under NIS 2
First 24 hours: containment, early warning to BSI (Article 23), crisis communication, payment decision, evidence preservation. What is legally required, what is not.
Phishing incident — is this a significant incident under NIS 2?
When a phishing wave crosses the CIR §11.6 threshold and how the early warning to the BSI looks.
DDoS attack — mitigation and reporting under NIS 2
Detection, mitigation at the ISP, §32 BSIG notification, and post-incident review.
Supplier breached — your own NIS 2 duties
When a supplier breach forces your own early warning, what Article 21(2)(d) requires.
Cloud provider outage — reportable under NIS 2?
When a cloud outage counts as a significant incident and which Article 21(2)(c) steps risk management requires.
Received a BSI request: what the BSI may ask for and how to reply
What a request can be based on (§§ 33, 61, 62 BSIG), how to proceed and how far the duty goes.
Data breach — NIS 2 and GDPR in parallel
Two supervisors, two clocks, one investigation: how Article 23 NIS 2 and Article 33 GDPR run in parallel.
Been asked to handle NIS2?
In the end you have everything in one document: what is done, what is still open, and your management's approval with name and date. The app writes the texts.
