NIS 2 in practice: From law to delivery – How system integrators make their customers secure, compliant and profitable

NIS 2 (The NIS policy stands for "Network and Information Security" policy).
Since December 6, 2025, the law implementing the NIS-2 Directive (NIS2UmsuCG) has been in effect in Germany. This significantly expands the scope of the BSIG (Federal Office for Information Security Act):
Around 29,500 facilities must register, report incidents and implement verifiable security measures – far beyond classic critical infrastructure.

The seminar will explain which of our customers are affected by the law and what the requirements are for these companies.

Agenda
here You can find the detailed agenda here.

• What has actually changed in Germany since December 6, 2025?
• NIS-2 Essentials with a focus on German implementation law
• Identifying the impact: Practical examples from customer industries
• Registration on the BSI portal
• The NIS-2 reporting process at the BSI, step by step
• Section 30 BSIG in practice: The 10 basic requirements „you can touch“
• Governance & Roles: Management, IT & (external) CISO
• Business model „External CISO“ & NIS-2 compliance as a service
• Open questions, best practices & "Next Steps"„

Target audience
Technical managers, ISMS officers, security consultants & sales staff from IT system houses with a security portfolio or ambition to move there.

Documents
Document package including presentation

Lecturer
Hans-Detlef Krebs has been working as an external data protection officer for over 20 years.
Through his work on behalf of state governments (including those in the European context), he possesses a very sound theoretical and practical knowledge in this field. He advises numerous large and medium-sized clients in sensitive areas. In 2010, he was one of the first in Germany to receive the title Data protection officer certified according to DIN EN ISO/IEC 17024.