NIS2 IT Management & Leadership

- Update on the BSIG and NIS2 Implementation Act: Detailed examination of thresholds, affected sectors, and registration requirements. - Roles & Responsibilities: Distinction between management (liability) and IT management (responsibility for implementation). - Risk Management according to ISO 27001 / NIST: Methodology for identifying critical business processes and conducting threat analysis. - Business Impact Analysis (BIA): How to define downtime that could jeopardise the company under the NIS2 standard. - The "Top 10" Security Measures: Specific requirements for encryption, multi-factor authentication (MFA), and access control. - Supply Chain Security: Third-party management - how to assess and contractually bind your suppliers in accordance with NIS2. - Incident Response & Reporting: Simulation of the 24-hour and 72-hour reporting obligations to the BSI (reporting channels and forms). - Business Continuity Management (BCM): Backup strategies, disaster recovery, and maintaining operations in the event of a crisis. Documentation & Audits: Preparing for BSI audits - which documents (evidence) must be "readily available"?