NIS2 applicability clarified for a corporate group
- Goal
- Clarify which German and Austrian companies of a European group fall under NIS2 – and what obligations follow for management and IT.
- Our role
- Applicability and sector analysis under the BSIG (German BSI Act), analysis of operational, legal and regulatory responsibilities per company, NIS2 gap analysis, training for management and IT departments – coordinated with external legal counsel.
- Result
- Applicability indications per company, a prioritised picture of the gaps and a blueprint for group CISO governance of the national subsidiaries.

