DEContact
Applies toEUDEAT
NIS2

NIS2 & Cybersecurity

NIS2UmsuCG in force since 6 December 2025 (Germany), Austrian Network and Information Systems Security Act 2026 (NISG 2026) in Austria from 1 October 2026: the 10 Section 30 BSIG obligations, § 38 management liability, building an ISMS, supply chain security, incident response 24 h / 72 h / 1 month (identical in Germany and Austria).

View the NIS2 Kit Top articles
Pillar articles

The key NIS2 topics in detail

Step-by-step guides with templates, regulatory references and audit checklists.

NIS2 Guide 2026

Obligations, Fines, Roadmap under § 30 BSIG

NIS2 implementation in Germany (NIS2UmsuCG)

10 obligations + § 38 management liability + 12-step roadmap

Section 30 BSIG: 10 mandatory measures

ISO 27001 mapping + templates from the NIS2 Kit (72 documents in 15 modules, eight of them directly along the mandatory areas of Section 30(2) BSIG)

Building an ISMS

10-week plan for SMEs + policies and concepts for all ten areas

Securing the NIS2 supply chain

8-step supplier audit + 6 contract clauses

BCM under NIS2

BIA, RTO/RPO, emergency plan, DR tests

NIS2 in Austria (NISG 2026)

Austrian obligations from 1 October 2026: § 32 measures, § 34 reporting to the CSIRT, § 29 registration
Quick overviews

Listicles & top lists

Compact overviews — ideal for board meetings, newsletters or as an A4 print template.

NIS2 top 7 quick wins

→ Seven immediate measures from MFA to asset inventory, each with effort and impact

NIS2 Section 30 BSIG: overview of the 10 obligations

→ All ten areas of Section 30(2) BSIG on one page, each with a short explanation and key actions
In depth

Practice clusters & glossary

Special topics for sectors, use cases and mandatory terms.

12 practice clusters

Sector-specific analysis (law firm, hospital, SaaS, e-commerce, association, skilled trades …)

→ All NIS2 articles in the knowledge hub

20 NIS2 glossary entries

Technical terms with regulatory references and a practical example.

→ Open the glossary

Build your NIS2 documentation with templates

Ready-to-use templates, checklists and training material, personalised with your company name — from EUR 990 net, one-time, 12 months of legal-status updates included.

View the NIS2 Kit →

Sources

Legal status of the sources reviewed: 2 May 2026

All articles on NIS2 (21)

  1. BCM under NIS2: Build Business Continuity Management (2026)

    Business Continuity Management under NIS2 (Section 30(2) no. 3 BSIG): BIA, RTO/RPO, emergency plan, disaster recovery, crisis team. ISO.

  2. NIS2 Austria (NISG 2026): Obligations from 1 October 2026

    The Austrian NISG 2026 transposes NIS2 into Austrian law. Application date 1 October 2026. Who is in scope, what changes vs. Germany, and registration.

  3. NIS2 for Cloud Providers and SaaS: The "Cloud Computing" Sector

    NIS2 obligations for cloud computing providers under Annex I digital infrastructure: classification, heightened duties, customer notification, ISO.

  4. NIS2 in Energy Supply: Municipal Utilities, Grid Operators, Smart Meter

    NIS2 for energy supply: municipal utilities, grid operators, electricity trading. Section 30 BSIG plus EnWG and KRITIS, with SCADA and Smart Meter Gateway.

  5. NIS2 + DORA for Banks and Financial Services

    NIS2 and DORA for banks and financial services: how DORA (Regulation 2022/2554) supersedes NIS2, ICT risk management, BaFin supervision, TLPT, and.

  6. NIS2 in Healthcare: Hospitals and Outpatient Care

    NIS2 in healthcare: hospitals from 50 employees, MVZ outpatient centers, care homes. Section 30 BSIG plus KRITIS plus GDPR Art. 9 special-category data.

  7. NIS2 Implementation Germany: 12-Step Roadmap + §30 BSIG Mandatory Measures

    Complete guide to NIS2 implementation in Germany (NIS2UmsuCG since Dec 6, 2025): 10 mandatory §30 BSIG measures, §38 BSIG executive liability, 12-step.

  8. NIS2 Incident Reporting: What, Who, How (24/72/30)

    NIS2 incident reporting 24/72/30: BSI portal walkthrough, content per stage, escalation, parallel GDPR Art. 33 reporting, and weekend coverage.

  9. Build ISMS in 10 Weeks for NIS2 Compliance

    Information Security Management System (ISMS) under NIS2 + ISO 27001 in 10 weeks: risk analysis, SoA, policies, training, audit. SME roadmap with template.

  10. NIS2 + ISO 27001 Certification: 12-Month Path

    ISO 27001 certification in 12 months as a NIS2 compliance booster: prep, internal audit, surveillance, recertification, costs and effort.

  11. NIS2 Section 30 BSIG: All 10 Obligations in One Overview

    Complete one-page overview of all 10 NIS2 mandatory measures under Section 30 BSIG, with a short explanation and key actions per area.

  12. Section 38 BSIG Management Liability: D&O Insurance and Protection Plan

    Section 38 BSIG management liability 2026: unlimited internal liability under company law, fines under Section 65 BSIG. D&O insurance must-have clauses and protection strategy for.

  13. NIS2 for Small Enterprises 50-100 Employees: Quick Compliance

    NIS2 compliance for SMEs with 50-100 employees: 8-week roadmap, EUR 8K budget, what to outsource, what to keep in-house.

  14. NIS2 Supply Chain Security: § 30 BSIG (2)(4) in Practice

    Supply chain security under NIS2 (§ 30 BSIG (2)(4)): supplier evaluation, contract clauses, audit rights, ENISA recommendations 2024/2025. SME practice.

  15. NIS2 Top-7 Quick Wins for SMEs in 2026

    Seven NIS2 quick wins for SMEs: MFA, 3-2-1 immutable backup, patch cycles, phishing training, supplier inventory, IRP, asset inventory. Effort and impact.

  16. NIS2 in Transport and Logistics: Public Transit, Rail, Freight

    NIS2 in the transport sector: public transit, rail logistics, freight forwarders, airport operators, port operations. Section 30 BSIG plus KRITIS.

  17. NIS2 in Water and Waste Management: Municipal Utilities

    NIS2 for water and waste-management entities: municipal utilities, water suppliers, wastewater facilities, waste disposal. KRITIS Ordinance thresholds and.

  18. § 30 BSIG: 10 Mandatory NIS2 Cybersecurity Measures Explained

    Detailed guide to § 30 BSIG (NIS2UmsuCG) 10 mandatory cybersecurity measures: ISO 27001 mapping, 22 templates covering the 10 mandatory areas (part of the NIS2 Kit with 72 templates total), reporting 24/72/30, § 38 BSIG executive.

  19. Phishing Training Concept: 4 Quarterly Modules + Simulations

    Phishing training concept: 4 quarterly modules, monthly simulations, click-rate tracking, escalation plan. Click rate from 22% to 4% in 12 months.

  20. Ransomware Recovery: 72-Hour Plan in 5 Phases

    Ransomware recovery in 72 hours, in 5 phases: detection, containment, forensics, recovery, lessons learned. NIS2 Section 30 BSIG-aligned with BSI.

  21. Supplier Audit Questionnaire: 40 Questions for NIS2

    A 40-question supplier audit questionnaire for NIS2 supply chain due diligence: security, GDPR, incident management, sub-processors, recovery.