The New IT Security Law NIS2 - Are You Affected and What Do You Need to Do?
summary
NIS2 has been law in Germany since 06.12.2025 and this session explains how medium-sized companies may be directly or indirectly in scope via customers and supply chains, and which short-term topics need attention. It outlines a pragmatic method to determine NIS2 applicability based on sector, company size and supply-chain realities, then specifies a realistic minimum baseline of required organizational and technical measures for risk management, incident reporting and clear responsibilities. The talk also highlights common implementation pitfalls where firms overinvest or focus on the wrong controls and where early clarity matters.
AI-written summary · about
chapters (13)
- 0:00NIS-2 introduction
- 1:48Legal obligations
- 3:10Status and challenges
- 5:39Fines and risks
- 8:06Who is affected
- 10:11Key vs essential entities
- 12:21Management duties
- 13:26Incident reporting
- 14:31Technical and org duties
- 16:37Resilience and emergency planning
- 17:40ISMS vs spreadsheets
- 18:44First compliance steps
- 19:48Q&A
related talks
46mThe Perfect Storm, What NIS2 and CRA Mean for Your IT Security Strategy
01h 01mNIS2 & CRA: Europe's Response to Cyber Shenanigans
33mCompliance and NIS2
11mThe Day the EU Broke My Build: NIS2 for Developers
42mHow NIS2 Redefines Monitoring and Incident Response Workflows
17mIT Security Summit 2025 | Pedro Costa | Layer8
01h 12mSecuring cyber critical infrastructure.
17mNavigating NIS2 & Accelerating IT/OT Security in Manufacturing