{"id":3866,"date":"2025-06-04T11:55:03","date_gmt":"2025-06-04T11:55:03","guid":{"rendered":"https:\/\/permsecure.com\/?p=3866"},"modified":"2026-10-14T11:51:38","modified_gmt":"2026-10-14T11:51:38","slug":"nis2-richtlinie-nis2-directive-requirements-conditions","status":"publish","type":"post","link":"https:\/\/permsecure.com\/en\/nis2-richtlinie-nis2-directive-requirements-conditions\/","title":{"rendered":"NIS2 Directive: What It Means for Affected Companies"},"content":{"rendered":"\n<div class=\"wp-block-group is-layout-constrained wp-block-group-is-layout-constrained padding-inline-C2G2 padding-inline-M-C0G1 padding-top-pe-full\"><figure class=\"wp-block-post-featured-image\"><img loading=\"lazy\" decoding=\"async\" width=\"2048\" height=\"1142\" src=\"https:\/\/permsecure.com\/wp-content\/uploads\/2025\/06\/NIS2_Richtlinien_Header-1.jpeg\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"\" style=\"object-fit:cover;\" srcset=\"https:\/\/permsecure.com\/wp-content\/uploads\/2025\/06\/NIS2_Richtlinien_Header-1.jpeg 2048w, https:\/\/permsecure.com\/wp-content\/uploads\/2025\/06\/NIS2_Richtlinien_Header-1-300x167.jpeg 300w, https:\/\/permsecure.com\/wp-content\/uploads\/2025\/06\/NIS2_Richtlinien_Header-1-1024x571.jpeg 1024w, https:\/\/permsecure.com\/wp-content\/uploads\/2025\/06\/NIS2_Richtlinien_Header-1-768x428.jpeg 768w, https:\/\/permsecure.com\/wp-content\/uploads\/2025\/06\/NIS2_Richtlinien_Header-1-1536x857.jpeg 1536w\" sizes=\"auto, (max-width: 2048px) 100vw, 2048px\" \/><\/figure>\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-ad2f72ca wp-block-group-is-layout-flex padding-top-1em\"><div class=\"wp-block-avatar\"><img alt='Christoph Schulze Avatar' src='https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/cropped-Christoph-Schulze-Circle-Portrait-40x40.png' srcset='https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/cropped-Christoph-Schulze-Circle-Portrait-80x80.png 2x' class='avatar avatar-40 photo wp-block-avatar__image' height='40' width='40' \/><\/div>\n\n<div class=\"wp-block-post-author padding-left-1em\"><div class=\"wp-block-post-author__content\"><p class=\"wp-block-post-author__name\"><a href=\"https:\/\/permsecure.com\/en\/author\/christoph\/\" target=\"_self\">Christoph Schulze<\/a><\/p><\/div><\/div>\n\n<div class=\"wp-block-post-date padding-left-1em\"><time datetime=\"2025-06-04T11:55:03+00:00\">04.06.2025<\/time><\/div><\/div>\n\n\n<h1 class=\"wp-block-post-title padding-bottom-0_25em padding-top-0_25em\">NIS2 Directive: What It Means for Affected Companies<\/h1>\n\n\n<div class=\"wp-block-group is-content-justification-left is-nowrap is-layout-flex wp-container-core-group-is-layout-f56a869c wp-block-group-is-layout-flex align-items-S-flex-start flex-flow-S-column\">\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex\">\n<div class=\"wp-block-button is-style-arrow-left is-style-outline is-style-outline--1\"><a class=\"wp-block-button__link has-basics-4-color has-text-color has-link-color has-border-color has-basics-4-border-color wp-element-button\" href=\"\/wissen\/\" style=\"border-width:2px\">Alle Artikel<\/a><\/div>\n<\/div>\n\n\n<div class=\"taxonomy-category wp-block-button wp-block-button__link has-primary-3-background-color has-background wp-element-button wp-block-post-terms margin-left-C0G1 margin-left-S-C0G0 margin-top-S-C0G1\"><a href=\"https:\/\/permsecure.com\/en\/wissen\/#category-iam-en\/\" rel=\"tag\">IAM<\/a><\/div><\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-layout-constrained wp-block-group-is-layout-constrained padding-block-pe-full padding-inline-C2G2 padding-inline-M-C0G1\">\n<p>In key sectors of the economy, such as energy, IT, transport and water supply, the NIS2 Directive aims to establish uniform security standards across the EU and ensure the resilience of IT systems, both physically and digitally. But what does this mean in practice for the companies affected? What requirements must they meet, and what are the consequences of non-compliance?<\/p>\n\n\n\n<p>The NIS2 Directive was supposed to be transposed into national law by 18 October 2024, but this has not yet happened in Germany. Nevertheless, companies should address the implications of the directive as soon as possible to avoid fines and other sanctions once it comes into force. We therefore provide an overview of what the directive stipulates, which companies are affected and what penalties may apply in the event of non-compliance.<\/p>\n\n\n<div class=\"table-of-contents\"><h3>Inhalt<\/h3><ul><li class=\"h2\"><a href=\"#what-is-the-nis2-directive\">What Is the NIS2 Directive?<\/a><\/li><li class=\"h2\"><a href=\"#what-does-the-directive-cover\">What Does the Directive Cover?<\/a><\/li><li class=\"h2\"><a href=\"#which-companies-are-affected-by-nis2\">Which Companies Are Affected by NIS2?<\/a><\/li><li class=\"h2\"><a href=\"#get-in-touch-with-us\">Get in touch with us<\/a><\/li><li class=\"h2\"><a href=\"#what-are-the-specific-security-measures-required-under-nis2\">What Are the Specific Security Measures Required Under NIS2?<\/a><\/li><li class=\"h2\"><a href=\"#which-security-measures-must-organisations-implement\">Which Security Measures Must Organisations Implement?<\/a><\/li><li class=\"h4\"><a href=\"#establishing-security-policies\">Establishing Security Policies<\/a><\/li><li class=\"h4\"><a href=\"#establishing-incident-management-procedures\">Establishing Incident Management Procedures<\/a><\/li><li class=\"h4\"><a href=\"#business-continuity-and-emergency-planning\">Business Continuity and Emergency Planning<\/a><\/li><li class=\"h4\"><a href=\"#monitoring\">Monitoring<\/a><\/li><li class=\"h4\"><a href=\"#supply-chain-security\">Supply Chain Security<\/a><\/li><li class=\"h4\"><a href=\"#security-in-the-acquisition-development-and-maintenance-of-network-and-information-systems\">Security in the Acquisition, Development and Maintenance of Network and Information Systems<\/a><\/li><li class=\"h4\"><a href=\"#cybersecurity-assessment\">Cybersecurity Assessment<\/a><\/li><li class=\"h4\"><a href=\"#access-control\">Access Control<\/a><\/li><li class=\"h4\"><a href=\"#multi-factor-authentication\">Multi-Factor Authentication<\/a><\/li><li class=\"h2\"><a href=\"#penalties-for-non-compliance-with-nis2\">Penalties for Non-Compliance with NIS2<\/a><\/li><li class=\"h2\"><a href=\"#differences-between-nis2-and-iso-27001\">Differences Between NIS2 and ISO 27001<\/a><\/li><li class=\"h2\"><a href=\"#current-implementation-of-nis2-in-germany\">Current Implementation of NIS2 in Germany<\/a><\/li><li class=\"h4\"><a href=\"#sources\">Sources<\/a><\/li><\/ul><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">What Is the NIS2 Directive?<\/h2>\n\n\n\n<p>The NIS2 Directive (Directive (EU) 2022\/2555) is the revised version of the NIS Directive (2016) and was adopted by the European Parliament and the Council of the European Union. It covers network and information systems (NIS) and addresses how cybersecurity can be maintained across a total of 18 critical sectors throughout the EU. It also requires Member States to establish national cybersecurity strategies to transpose the directive into national law.<\/p>\n\n\n\n<p>The development of the new directive was prompted by a proposal from the European Commission in 2020 to revise NIS1. A review had revealed that companies operating in the EU lacked sufficient cyber resilience and that there was an inadequate shared understanding of the key threats and challenges across the EU. The directive entered into force on 16 January 2023, and Member States were required to transpose it into national law by 17 October 2024.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What Does the Directive Cover?<\/h2>\n\n\n\n<p>In summary, the directive aims to:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Improve the cyber resilience of critical entities<\/li>\n\n\n\n<li>Promote information sharing and cooperation between Member States<\/li>\n\n\n\n<li>Establish uniform security standards for network and information systems throughout the EU<\/li>\n<\/ul>\n\n\n\n<p>The directive requires EU Member States to adopt national cybersecurity strategies and designate national Computer Security Incident Response Teams (CSIRTs) to manage risks and incidents. It also harmonises the sanctions that Member States can impose.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Which Companies Are Affected by NIS2?<\/h2>\n\n\n\n<p>While NIS1 focused on &#8220;essential entities&#8221; (e.g. energy and transport), NIS2 also applies to &#8220;important entities&#8221;, such as postal services and waste management companies.<\/p>\n\n\n\n<p>Essential entities are subject to stricter supervision and more stringent reporting requirements. These include companies operating in the following sectors:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Energy<\/li>\n\n\n\n<li>Transport<\/li>\n\n\n\n<li>Banking<\/li>\n\n\n\n<li>Financial market infrastructure<\/li>\n\n\n\n<li>Healthcare<\/li>\n\n\n\n<li>Drinking water supply<\/li>\n\n\n\n<li>Digital infrastructure<\/li>\n\n\n\n<li>Public administration<\/li>\n\n\n\n<li>Space infrastructure<\/li>\n<\/ul>\n\n\n\n<p>Important entities are subject to less stringent supervision but must also comply with reporting obligations. These include companies operating in the following sectors:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Postal services<\/li>\n\n\n\n<li>Waste management<\/li>\n\n\n\n<li>Chemical industry<\/li>\n\n\n\n<li>Food production<\/li>\n\n\n\n<li>Manufacturing of critical goods (such as medical technology or mechanical engineering)<\/li>\n\n\n\n<li>IT service providers (such as data centres and content delivery networks)<\/li>\n<\/ul>\n\n\n\n<p>As a general rule, the NIS2 Directive applies to companies with 50 or more employees and an annual turnover exceeding \u20ac10 million. However, smaller companies may also be affected if they are considered systemically important. This includes companies that play a significant role in public or economic life, operate within supply chains for critical services, face particular risks such as cyberattacks, or are affected by dependencies on third countries.<\/p>\n<\/div>\n\n\n\n<div id=\"contact-form\" class=\"wp-block-group is-layout-constrained wp-block-group-is-layout-constrained\">\n<div class=\"wp-block-group has-full-white-color has-secondary-4-background-color has-text-color has-background has-link-color wp-elements-b2947f39df45a8e907184215de247d30 is-layout-flow wp-block-group-is-layout-flow padding-block-pe-full padding-inline-C1G2 padding-inline-M-C0G1\">\n<div class=\"wp-block-group is-background has-secondary-4-background-color has-background is-layout-flow wp-block-group-is-layout-flow\"><\/div>\n\n\n\n<div class=\"wp-block-group is-content-justification-space-between is-nowrap is-layout-flex wp-container-core-group-is-layout-0dfbf163 wp-block-group-is-layout-flex align-items-flex-start flex-flow-S-column\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow padding-bottom-S-1em width-C5G0 width-S-C10G0\">\n<h2 class=\"wp-block-heading is-style-default padding-bottom-0_5em\" style=\"font-size:50px\">Get in touch with us<\/h2>\n\n\n\n<p>Do you have any questions about our products or services? Do you need support?<\/p>\n\n\n\n<p>We will be happy to help you!<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow width-C5G0 width-M-C6G0 width-S-C12G0\"><div class=\"wpforms-container wpforms-block wpforms-block-eca6757a-a186-4ce6-b491-f4e4ca6efff6 wpforms-render-modern\" id=\"wpforms-3146\"><form id=\"wpforms-form-3146\" class=\"wpforms-validate wpforms-form wpforms-ajax-form\" data-formid=\"3146\" method=\"post\" enctype=\"multipart\/form-data\" action=\"\/en\/wp-json\/wp\/v2\/posts\/3866\" data-token=\"3f231024507688870696dabb75a99555\" data-token-time=\"1792716800\"><noscript class=\"wpforms-error-noscript\">Please enable JavaScript in your browser to complete this form.<\/noscript><div id=\"wpforms-error-noscript\" style=\"display: none;\">Please enable JavaScript in your browser to complete this form.<\/div><div class=\"wpforms-field-container\"><div id=\"wpforms-3146-field_4-container\" class=\"wpforms-field wpforms-field-text\" data-field-type=\"text\" data-field-id=\"4\"><label class=\"wpforms-field-label wpforms-label-hide\" for=\"wpforms-3146-field_4\" aria-hidden=\"false\">First Name <span class=\"wpforms-required-label\" aria-hidden=\"true\">*<\/span><\/label><input type=\"text\" id=\"wpforms-3146-field_4\" class=\"wpforms-field-large wpforms-field-required\" name=\"wpforms[fields][4]\" placeholder=\"First Name*\" aria-errormessage=\"wpforms-3146-field_4-error\" required><\/div><div id=\"wpforms-3146-field_5-container\" class=\"wpforms-field wpforms-field-text\" data-field-type=\"text\" data-field-id=\"5\"><label class=\"wpforms-field-label wpforms-label-hide\" for=\"wpforms-3146-field_5\" aria-hidden=\"false\">Last Name <span class=\"wpforms-required-label\" aria-hidden=\"true\">*<\/span><\/label><input type=\"text\" id=\"wpforms-3146-field_5\" class=\"wpforms-field-large wpforms-field-required\" name=\"wpforms[fields][5]\" placeholder=\"Last Name*\" aria-errormessage=\"wpforms-3146-field_5-error\" required><\/div><div id=\"wpforms-3146-field_2-container\" class=\"wpforms-field wpforms-field-email\" data-field-type=\"email\" data-field-id=\"2\"><label class=\"wpforms-field-label wpforms-label-hide\" for=\"wpforms-3146-field_2\" aria-hidden=\"false\">E-mail* <span class=\"wpforms-required-label\" aria-hidden=\"true\">*<\/span><\/label><input type=\"email\" id=\"wpforms-3146-field_2\" class=\"wpforms-field-large wpforms-field-required\" data-rule-restricted-email=\"1\" name=\"wpforms[fields][2]\" placeholder=\"E-mail*\" spellcheck=\"false\" aria-errormessage=\"wpforms-3146-field_2-error\" required><\/div>\t\t<div id=\"wpforms-3146-field_1-container\"\n\t\t\tclass=\"wpforms-field wpforms-field-text\"\n\t\t\tdata-field-type=\"text\"\n\t\t\tdata-field-id=\"1\"\n\t\t\t>\n\t\t\t<label class=\"wpforms-field-label\" for=\"wpforms-3146-field_1\" >and Last Name<\/label>\n\t\t\t<input type=\"text\" id=\"wpforms-3146-field_1\" class=\"wpforms-field-medium\" name=\"wpforms[fields][1]\" >\n\t\t<\/div>\n\t\t<div id=\"wpforms-3146-field_3-container\" class=\"wpforms-field wpforms-field-text\" data-field-type=\"text\" data-field-id=\"3\"><label class=\"wpforms-field-label wpforms-label-hide\" for=\"wpforms-3146-field_3\" aria-hidden=\"false\">Company <span class=\"wpforms-required-label\" aria-hidden=\"true\">*<\/span><\/label><input type=\"text\" id=\"wpforms-3146-field_3\" class=\"wpforms-field-large wpforms-field-required\" name=\"wpforms[fields][3]\" placeholder=\"Company*\" aria-errormessage=\"wpforms-3146-field_3-error\" required><\/div><div id=\"wpforms-3146-field_7-container\" class=\"wpforms-field wpforms-field-textarea\" data-field-type=\"textarea\" data-field-id=\"7\"><label class=\"wpforms-field-label wpforms-label-hide\" for=\"wpforms-3146-field_7\" aria-hidden=\"false\">Nachricht <span class=\"wpforms-required-label\" aria-hidden=\"true\">*<\/span><\/label><textarea id=\"wpforms-3146-field_7\" class=\"wpforms-field-large wpforms-field-required\" name=\"wpforms[fields][7]\" placeholder=\"Message*\" aria-errormessage=\"wpforms-3146-field_7-error\" required><\/textarea><\/div><div id=\"wpforms-3146-field_6-container\" class=\"wpforms-field wpforms-field-checkbox color-secondary-1 has-copy-s-font-size\" data-field-type=\"checkbox\" data-field-id=\"6\"><fieldset><legend class=\"wpforms-field-label wpforms-label-hide\" aria-hidden=\"false\">Terms and Conditions <span class=\"wpforms-required-label\" aria-hidden=\"true\">*<\/span><\/legend><ul id=\"wpforms-3146-field_6\" class=\"wpforms-field-required\"><li class=\"choice-1 depth-1\"><input type=\"checkbox\" id=\"wpforms-3146-field_6_1\" name=\"wpforms[fields][6][]\" value=\"I accept the privacy policy.\" aria-errormessage=\"wpforms-3146-field_6_1-error\" required ><label class=\"wpforms-field-label-inline\" for=\"wpforms-3146-field_6_1\">I accept the privacy policy.<\/label><\/li><\/ul><\/fieldset><\/div><script>\n\t\t\t\t( function() {\n\t\t\t\t\tconst style = document.createElement( 'style' );\n\t\t\t\t\tstyle.appendChild( document.createTextNode( '#wpforms-3146-field_1-container { position: absolute !important; overflow: hidden !important; display: inline !important; height: 1px !important; width: 1px !important; z-index: -1000 !important; padding: 0 !important; } #wpforms-3146-field_1-container input { visibility: hidden; } #wpforms-conversational-form-page #wpforms-3146-field_1-container label { counter-increment: none; }' ) );\n\t\t\t\t\tdocument.head.appendChild( style );\n\t\t\t\t\tdocument.currentScript?.remove();\n\t\t\t\t} )();\n\t\t\t<\/script><\/div><!-- .wpforms-field-container --><div class=\"wpforms-submit-container\" ><input type=\"hidden\" name=\"wpforms[id]\" value=\"3146\"><input type=\"hidden\" name=\"wpforms[time_token]\" value=\"1792716800.532cd68697f60fb5b83fac694363e429dab65129b6c4406e34e3a3a0ca38da42\"><input type=\"hidden\" name=\"page_title\" value=\"\"><input type=\"hidden\" name=\"page_url\" value=\"https:\/\/permsecure.com\/en\/wp-json\/wp\/v2\/posts\/3866\"><input type=\"hidden\" name=\"url_referer\" value=\"\"><button type=\"submit\" name=\"wpforms[submit]\" id=\"wpforms-submit-3146\" class=\"wpforms-submit has-secondary-3-background-color\" data-alt-text=\"Please wait...\" data-submit-text=\"Submit\" aria-live=\"assertive\" value=\"wpforms-submit\">Submit<\/button><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/permsecure.com\/wp-content\/plugins\/wpforms\/assets\/images\/submit-spin.svg\" class=\"wpforms-submit-spinner\" style=\"display: none;\" width=\"26\" height=\"26\" alt=\"Loading\"><\/div><\/form><\/div>  <!-- .wpforms-container --><\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<p><\/p>\n\n\n\n<div class=\"wp-block-group is-layout-constrained wp-block-group-is-layout-constrained padding-block-pe-full padding-inline-C2G2 padding-inline-M-C0G1\">\n<h2 class=\"wp-block-heading\">What Are the Specific Security Measures Required Under NIS2?<\/h2>\n\n\n\n<p>Companies affected by the directive must implement technical and organisational security measures, particularly in areas such as risk management, access controls and encryption. They must also conduct regular security audits and risk assessments. Security incidents must be reported within 24 hours.<\/p>\n\n\n\n<p>In addition, affected organisations must register with the relevant authorities. This means that within three months of the national NIS2 legislation coming into force in their respective country, companies in Germany, for example, must register with the Federal Office for Information Security (BSI).<\/p>\n\n\n\n<p>The specific security measures that companies must implement are outlined in the <a href=\"https:\/\/eur-lex.europa.eu\/eli\/dir\/2022\/2555\">official NIS2 Directive<\/a> and, specifically for the IT services sector, in the <a href=\"https:\/\/ec.europa.eu\/info\/law\/better-regulation\/have-your-say\/initiatives\/14241-Cybersecurity-risk-management-reporting-obligations-for-digital-infrastructure-providers-and-ICT-service-managers_en\">Implementing Act for IT Service Providers<\/a>. These two documents provide insight into the specific requirements. However, the exact implications for other industries and at national level will only become clear through national regulations (which, for example, have not yet been introduced in Germany and Austria).<\/p>\n\n\n\n<div class=\"wp-block-group is-content-justification-space-between is-nowrap is-layout-flex wp-container-core-group-is-layout-0dfbf163 wp-block-group-is-layout-flex align-items-flex-start flex-flow-S-column width-C12G0 width-M-C12G0\">\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow padding-bottom-S-1em width-C8G0 width-M-C12G0 width-S-C12G0\">\n<h2 class=\"wp-block-heading is-style-h2 padding-bottom-0_5em\">Which Security Measures Must Organisations Implement?<\/h2>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-ad2f72ca wp-block-group-is-layout-flex align-items-flex-start padding-bottom-1em padding-inline-M-C0G1\">\n<figure class=\"wp-block-image size-large margin-right-C0G1 width-C0G2\"><img loading=\"lazy\" decoding=\"async\" width=\"40\" height=\"41\" src=\"https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/checked-ok.svg\" alt=\"\" class=\"wp-image-1187\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group is-layout-constrained wp-block-group-is-layout-constrained width-C9G1 width-M-C10G1\">\n<h4 class=\"wp-block-heading is-style-h4\">Establishing Security Policies<\/h4>\n\n\n\n<p>It is essential to establish policies for risk analysis and the security of information systems. Organisations must document their approach to securing their IT systems and networks, including clearly defined roles and responsibilities.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-ad2f72ca wp-block-group-is-layout-flex align-items-flex-start padding-bottom-1em padding-inline-M-C0G1\">\n<figure class=\"wp-block-image size-large margin-right-C0G1 width-C0G2\"><img loading=\"lazy\" decoding=\"async\" width=\"40\" height=\"41\" src=\"https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/checked-ok.svg\" alt=\"\" class=\"wp-image-1187\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group is-layout-constrained wp-block-group-is-layout-constrained width-C9G1 width-M-C10G1\">\n<h4 class=\"wp-block-heading is-style-h4\">Establishing Incident Management Procedures<\/h4>\n\n\n\n<p>Procedures must be documented in detail to ensure that IT incidents are contained, problems or vulnerabilities are resolved, and normal operations can be restored. Key questions include: Who is responsible for detecting and responding to incidents? What measures need to be taken? What reporting obligations must be fulfilled towards the relevant authorities? In the event of a significant security incident, for example, the competent authority must be notified within 24 hours of becoming aware of the incident.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-ad2f72ca wp-block-group-is-layout-flex align-items-flex-start padding-bottom-1em padding-inline-M-C0G1\">\n<figure class=\"wp-block-image size-large margin-right-C0G1 width-C0G2\"><img loading=\"lazy\" decoding=\"async\" width=\"40\" height=\"41\" src=\"https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/checked-ok.svg\" alt=\"\" class=\"wp-image-1187\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group is-layout-constrained wp-block-group-is-layout-constrained width-C9G1 width-M-C10G1\">\n<h4 class=\"wp-block-heading is-style-h4\">Business Continuity and Emergency Planning<\/h4>\n\n\n\n<p>This involves establishing backup management, procedures for restoring systems and data following incidents, and a clear crisis management framework. These measures help ensure business continuity and the restoration of normal operations. The plan must define roles, responsibilities and procedures. Particular emphasis should be placed on creating and maintaining backups and ensuring sufficient resource redundancy to minimise system failures.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-ad2f72ca wp-block-group-is-layout-flex align-items-flex-start padding-bottom-1em padding-inline-M-C0G1\">\n<figure class=\"wp-block-image size-large margin-right-C0G1 width-C0G2\"><img loading=\"lazy\" decoding=\"async\" width=\"40\" height=\"41\" src=\"https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/checked-ok.svg\" alt=\"\" class=\"wp-image-1187\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group is-layout-constrained wp-block-group-is-layout-constrained width-C9G1 width-M-C10G1\">\n<h4 class=\"wp-block-heading is-style-h4\">Monitoring<\/h4>\n\n\n\n<p>Operators are required to monitor activities within their IT systems. Monitoring should be automated using appropriate tools. Examples of events that should be monitored and documented include network traffic, application access, authentication events, privileged account activities, access to backups and physical access to facilities.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-ad2f72ca wp-block-group-is-layout-flex align-items-flex-start padding-bottom-1em padding-inline-M-C0G1\">\n<figure class=\"wp-block-image size-large margin-right-C0G1 width-C0G2\"><img loading=\"lazy\" decoding=\"async\" width=\"40\" height=\"41\" src=\"https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/checked-ok.svg\" alt=\"\" class=\"wp-image-1187\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group is-layout-constrained wp-block-group-is-layout-constrained width-C9G1 width-M-C10G1\">\n<h4 class=\"wp-block-heading is-style-h4\">Supply Chain Security<\/h4>\n\n\n\n<p>This concerns data security throughout the supply chain, including security-related aspects of relationships between organisations and their direct suppliers or service providers. Organisations must establish a supply chain security policy.<\/p>\n\n\n\n<p>Clear criteria must be defined for selecting suppliers, taking their security practices into account. Service Level Agreements (SLAs) must also address personnel and IT security requirements.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-ad2f72ca wp-block-group-is-layout-flex align-items-flex-start padding-bottom-1em padding-inline-M-C0G1\">\n<figure class=\"wp-block-image size-large margin-right-C0G1 width-C0G2\"><img loading=\"lazy\" decoding=\"async\" width=\"40\" height=\"41\" src=\"https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/checked-ok.svg\" alt=\"\" class=\"wp-image-1187\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group is-layout-constrained wp-block-group-is-layout-constrained width-C9G1 width-M-C10G1\">\n<h4 class=\"wp-block-heading is-style-h4\">Security in the Acquisition, Development and Maintenance of Network and Information Systems<\/h4>\n\n\n\n<p>Organisations must ensure that security requirements are met when selecting IT products and services and that the security features of these products are configured correctly. Protection against malware, regular vulnerability scans and security testing help maintain the ongoing security of IT products. This also means replacing products that no longer receive security updates.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-ad2f72ca wp-block-group-is-layout-flex align-items-flex-start padding-bottom-1em padding-inline-M-C0G1\">\n<figure class=\"wp-block-image size-large margin-right-C0G1 width-C0G2\"><img loading=\"lazy\" decoding=\"async\" width=\"40\" height=\"41\" src=\"https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/checked-ok.svg\" alt=\"\" class=\"wp-image-1187\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group is-layout-constrained wp-block-group-is-layout-constrained width-C9G1 width-M-C10G1\">\n<h4 class=\"wp-block-heading is-style-h4\">Cybersecurity Assessment<\/h4>\n\n\n\n<p>Organisations must develop policies and procedures to assess the effectiveness of their cybersecurity risk management measures. This involves not only reviewing existing security measures but also conducting regular assessments and implementing continuous improvements.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-ad2f72ca wp-block-group-is-layout-flex align-items-flex-start padding-bottom-1em padding-inline-M-C0G1\">\n<figure class=\"wp-block-image size-large margin-right-C0G1 width-C0G2\"><img loading=\"lazy\" decoding=\"async\" width=\"40\" height=\"41\" src=\"https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/checked-ok.svg\" alt=\"\" class=\"wp-image-1187\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group is-layout-constrained wp-block-group-is-layout-constrained width-C9G1 width-M-C10G1\">\n<h4 class=\"wp-block-heading is-style-h4\">Access Control<\/h4>\n\n\n\n<p>Clear guidelines are required to define who has access to which resources and systems. This applies to employees, visitors, external service providers, interfaces and applications.<\/p>\n\n\n\n<p>The entire lifecycle of user accounts must be considered. This includes regularly reviewing and adjusting access permissions according to the principle of least privilege, as well as disabling or deleting access rights when individuals leave the organisation.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-ad2f72ca wp-block-group-is-layout-flex align-items-flex-start padding-bottom-1em padding-inline-M-C0G1\">\n<figure class=\"wp-block-image size-large margin-right-C0G1 width-C0G2\"><img loading=\"lazy\" decoding=\"async\" width=\"40\" height=\"41\" src=\"https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/checked-ok.svg\" alt=\"\" class=\"wp-image-1187\"\/><\/figure>\n\n\n\n<div class=\"wp-block-group is-layout-constrained wp-block-group-is-layout-constrained width-C9G1 width-M-C10G1\">\n<h4 class=\"wp-block-heading is-style-h4\">Multi-Factor Authentication<\/h4>\n\n\n\n<p>Organisations must establish policies and procedures for the use of multi-factor authentication or continuous authentication solutions, secure voice, video and text communications, and, where appropriate, secure emergency communication systems within the organisation.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-basics-1-background-color has-background is-layout-flow wp-block-group-is-layout-flow padding-block-pe-full padding-inline-C1G2 padding-inline-M-C0G1\">\n<div class=\"wp-block-group is-background has-basics-1-background-color has-background is-layout-flow wp-block-group-is-layout-flow\"><\/div>\n\n\n\n<div class=\"wp-block-group is-content-justification-space-between is-nowrap is-layout-flex wp-container-core-group-is-layout-0dfbf163 wp-block-group-is-layout-flex align-items-flex-start flex-flow-S-column\">\n<figure class=\"wp-block-image size-full max-width-200px max-width-S-300px width-C2G0 width-M-C5G0 width-S-C12G0\"><img loading=\"lazy\" decoding=\"async\" width=\"300\" height=\"301\" src=\"https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/Christoph-Schulze-Circle-Portrait.png\" alt=\"\" class=\"wp-image-1094\" srcset=\"https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/Christoph-Schulze-Circle-Portrait.png 300w, https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/Christoph-Schulze-Circle-Portrait-150x150.png 150w\" sizes=\"auto, (max-width: 300px) 100vw, 300px\" \/><\/figure>\n\n\n\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow width-C8G0 width-M-C7G0 width-S-C12G0\">\n<h3 class=\"wp-block-heading is-style-h3\"><a href=\"https:\/\/permsecure.com\/en\/tenfold\/\" target=\"_blank\" rel=\"noreferrer noopener\"><em>tenfold<\/em><\/a> offers a fully automated solution for your access management and Identity and Access Management (IAM) needs \u2013 schedule a free demo with our experts today.<\/h3>\n\n\n\n<div class=\"wp-block-buttons is-layout-flex wp-block-buttons-is-layout-flex padding-top-1em\">\n<div class=\"wp-block-button is-style-arrow-right\"><a class=\"wp-block-button__link has-primary-3-background-color has-background wp-element-button\" href=\"https:\/\/permsecure.com\/en\/contact\/\">Contact Us Now<\/a><\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-layout-constrained wp-block-group-is-layout-constrained padding-block-pe-full padding-inline-C2G2 padding-inline-M-C0G1\">\n<h2 class=\"wp-block-heading\">Penalties for Non-Compliance with NIS2<\/h2>\n\n\n\n<p>To ensure that companies comply with the directive, significant penalties and liability risks are \u043f\u0440\u0435\u0434\u0443\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u044b for non-compliance. In addition to financial penalties, organisational and personal consequences for company management are possible. Managing directors may be held personally liable if they are found to have neglected their supervisory duties. This can result in dismissal, professional disqualification, or civil and criminal liability.<\/p>\n\n\n\n<p>The following fines may be imposed for violations:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Essential entities: \u20ac10 million or, for companies with an annual turnover exceeding \u20ac500 million, 2% of their worldwide annual turnover.<\/li>\n\n\n\n<li>Important entities: \u20ac7 million or, for companies with an annual turnover exceeding \u20ac500 million, 1.4% of their worldwide annual turnover.<\/li>\n\n\n\n<li>Fines of \u20ac2 million: Manufacturers of IT systems may face fines of up to \u20ac2 million if they refuse to cooperate with BSI instructions to restore the security or functionality of IT systems. Telecommunications and telemedia providers may also face fines of this amount if they fail to implement measures ordered by the BSI to prevent specific significant threats.<\/li>\n\n\n\n<li>Fines of \u20ac1 million: For example, operators of critical infrastructure may face fines if they fail to provide accurate or complete evidence of compliance with the relevant requirements.<\/li>\n<\/ul>\n\n\n\n<p>A more detailed overview of <a href=\"https:\/\/www.openkritis.de\/betreiber\/bussgelder-kritis-bsig.html\">potential fines is provided by OpenKRITIS<\/a>, a platform dedicated to the protection of critical infrastructure.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Differences Between NIS2 and ISO 27001<\/h2>\n\n\n\n<p>At first glance, NIS2 and ISO 27001 appear similar, as both are frameworks designed to strengthen cybersecurity and risk management within organisations. However, they differ in their focus, legal status and scope of application. Here are some of the key differences:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Legal obligations: The NIS2 Directive is a binding EU directive that must be transposed into national law. ISO 27001, on the other hand, is an international standard for which certification is voluntary.<\/li>\n\n\n\n<li>Certification: NIS2 does not provide for formal certification. Compliance is monitored by the competent authorities. ISO 27001, however, allows organisations to obtain certification through accredited auditors.<\/li>\n\n\n\n<li>Supervision and audits: NIS2 involves regulatory supervision and potential fines for non-compliance. ISO 27001 requires regular external audits to maintain certification.<\/li>\n\n\n\n<li>Reporting obligations and liability: Under NIS2, incidents must be reported to the relevant authorities. ISO 27001 does not establish a comparable legal reporting obligation to a designated authority. Unlike NIS2, ISO 27001 does not itself impose statutory liability on management for implementation.<\/li>\n<\/ul>\n\n\n\n<p>ISO 27001 can therefore serve as a foundation for meeting NIS2 requirements in areas such as risk management, technical security measures and security policies. However, ISO 27001 certification alone does not guarantee full compliance with the NIS2 Directive.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Current Implementation of NIS2 in Germany<\/h2>\n\n\n\n<p>In Germany, the Federal Office for Information Security (BSI) is responsible for overseeing cybersecurity, and legislation to implement NIS2 is in preparation. A government draft was presented on 24 July 2024, but Germany failed to meet the implementation deadline of 18 October 2024.<\/p>\n\n\n\n<p>Following the 2025 Bundestag elections, legislative proposals that had not yet been adopted must be reintroduced and renegotiated. As a result, implementation of NIS2 is not expected before the second quarter of 2025.<\/p>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-basics-1-background-color has-background is-content-justification-space-between is-nowrap is-layout-flex wp-container-core-group-is-layout-0dfbf163 wp-block-group-is-layout-flex padding-block-pe-full padding-inline-C1G2\">\n<div class=\"wp-block-group is-background has-basics-1-background-color has-background is-layout-flow wp-block-group-is-layout-flow\"><\/div>\n\n\n\n<div class=\"wp-block-group is-content-justification-right is-nowrap is-layout-flex wp-container-core-group-is-layout-5054138e wp-block-group-is-layout-flex width-C2G0\"><div class=\"wp-block-avatar max-width-150px width-C2G0\"><img alt='Christoph Schulze Avatar' src='https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/cropped-Christoph-Schulze-Circle-Portrait-128x128.png' srcset='https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/cropped-Christoph-Schulze-Circle-Portrait-256x256.png 2x' class='avatar avatar-128 photo wp-block-avatar__image' height='128' width='128' \/><\/div><\/div>\n\n\n\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow width-C8G0\">\n<p class=\"has-h-3-font-size\">About the Author<\/p>\n\n\n\n<p>Bartosz Grodzicki is a Senior Consultant at permSECURE. He has been designing and supporting IAM projects and helping customers to optimise their user and resource management since 2013.<\/p>\n<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group is-layout-constrained wp-block-group-is-layout-constrained padding-block-pe-full padding-inline-C0G1\">\n<p class=\"has-text-align-center has-h-1-font-size padding-bottom-0_5em\">Related Articles<\/p>\n\n\n\n<div class=\"wp-block-query is-layout-flow wp-block-query-is-layout-flow padding-inline-C0G1 width-C12G0\"><ul class=\"columns-3 wp-block-post-template is-layout-grid wp-container-core-post-template-is-layout-2fc57c17 wp-block-post-template-is-layout-grid display-flex flex-flow-M-column flex-flow-row justify-content-space-between\"><li class=\"wp-block-post post-3866 post type-post status-publish format-standard has-post-thumbnail hentry category-iam-en\">\n\n<div class=\"wp-block-group has-border-color has-full-white-background-color has-background is-layout-flow wp-block-group-is-layout-flow display-flex flex-flow-column margin-bottom-M-C0G1 overflow-hidden padding-bottom-C0G1 width-C4G0 width-M-C12G0 display-flex flex-flow-M-column flex-flow-row justify-content-space-between\" style=\"border-color:var(--theme-color-basics-2);border-width:1px;border-radius:7px;\"><figure class=\"wp-block-post-featured-image padding-left-M-C0G1 padding-left-S-C0G0 padding-top-M-C0G1 padding-top-S-C0G0 width-M-C6G0 width-S-C12G0\"><a href=\"https:\/\/permsecure.com\/en\/nis2-richtlinie-nis2-directive-requirements-conditions\/\" target=\"_self\"  ><img loading=\"lazy\" decoding=\"async\" width=\"2048\" height=\"1142\" src=\"https:\/\/permsecure.com\/wp-content\/uploads\/2025\/06\/NIS2_Richtlinien_Header-1.jpeg\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"NIS2 Directive: What It Means for Affected Companies\" style=\"object-fit:cover;\" srcset=\"https:\/\/permsecure.com\/wp-content\/uploads\/2025\/06\/NIS2_Richtlinien_Header-1.jpeg 2048w, https:\/\/permsecure.com\/wp-content\/uploads\/2025\/06\/NIS2_Richtlinien_Header-1-300x167.jpeg 300w, https:\/\/permsecure.com\/wp-content\/uploads\/2025\/06\/NIS2_Richtlinien_Header-1-1024x571.jpeg 1024w, https:\/\/permsecure.com\/wp-content\/uploads\/2025\/06\/NIS2_Richtlinien_Header-1-768x428.jpeg 768w, https:\/\/permsecure.com\/wp-content\/uploads\/2025\/06\/NIS2_Richtlinien_Header-1-1536x857.jpeg 1536w\" sizes=\"auto, (max-width: 2048px) 100vw, 2048px\" \/><\/a><\/figure>\n\n\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow padding-inline-C0G1 padding-top-1em\"><div class=\"taxonomy-category has-link-color wp-elements-0b7e5c6f257c8288261c58591ca334de wp-block-post-terms has-text-color has-basics-6-color padding-bottom-0_5em pointer-events-none text-decoration-none\"><a href=\"https:\/\/permsecure.com\/en\/wissen\/#category-iam-en\/\" rel=\"tag\">IAM<\/a><\/div>\n\n<h2 class=\"has-link-color wp-elements-211ad1cc0f2e5d4e47476b0f3c1e7f56 wp-block-post-title has-text-color has-basics-6-color has-h-4-font-size\"><a href=\"https:\/\/permsecure.com\/en\/nis2-richtlinie-nis2-directive-requirements-conditions\/\" target=\"_self\" >NIS2 Directive: What It Means for Affected Companies<\/a><\/h2>\n\n<div class=\"wp-block-post-excerpt padding-bottom-1em\"><p class=\"wp-block-post-excerpt__excerpt\">In key sectors of the economy, such as energy, IT, transport and water supply, the NIS2 Directive aims to establish uniform security standards across the EU and ensure the resilience of IT systems, both physically and digitally. But what does this mean in practice<\/p><p class=\"wp-block-post-excerpt__more-text\"><a class=\"wp-block-post-excerpt__more-link\" href=\"https:\/\/permsecure.com\/en\/nis2-richtlinie-nis2-directive-requirements-conditions\/\">Show full article<\/a><\/p><\/div><\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-ad2f72ca wp-block-group-is-layout-flex padding-inline-C0G1\"><div class=\"wp-block-avatar\"><img alt='Christoph Schulze Avatar' src='https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/cropped-Christoph-Schulze-Circle-Portrait-50x50.png' srcset='https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/cropped-Christoph-Schulze-Circle-Portrait-100x100.png 2x' class='avatar avatar-50 photo wp-block-avatar__image' height='50' width='50' \/><\/div>\n\n\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow padding-left-0_5em\"><div class=\"wp-block-post-date has-copy-s-font-size\"><time datetime=\"2025-06-04T11:55:03+00:00\">04.06.2025<\/time><\/div>\n\n<div class=\"wp-block-post-author-name has-copy-s-font-size\">Christoph Schulze<\/div><\/div>\n<\/div>\n<\/div>\n\n<\/li><li class=\"wp-block-post post-3352 post type-post status-publish format-standard has-post-thumbnail hentry category-iam-en category-whitepaper-en tag-whitepaper-en\">\n\n<div class=\"wp-block-group has-border-color has-full-white-background-color has-background is-layout-flow wp-block-group-is-layout-flow display-flex flex-flow-column margin-bottom-M-C0G1 overflow-hidden padding-bottom-C0G1 width-C4G0 width-M-C12G0 display-flex flex-flow-M-column flex-flow-row justify-content-space-between\" style=\"border-color:var(--theme-color-basics-2);border-width:1px;border-radius:7px;\"><figure class=\"wp-block-post-featured-image padding-left-M-C0G1 padding-left-S-C0G0 padding-top-M-C0G1 padding-top-S-C0G0 width-M-C6G0 width-S-C12G0\"><a href=\"https:\/\/permsecure.com\/en\/whitepaper-with-milesstones-to-success-iam-implementation\/\" target=\"_self\"  ><img loading=\"lazy\" decoding=\"async\" width=\"1501\" height=\"1001\" src=\"https:\/\/permsecure.com\/wp-content\/uploads\/0202\/09\/Group-184.png\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"Whitepaper &#8211; Identity &amp; Acce&shy;\u00ad\u00adss Management \u2013 With Milesstones to Success\" style=\"object-fit:cover;\" srcset=\"https:\/\/permsecure.com\/wp-content\/uploads\/0202\/09\/Group-184.png 1501w, https:\/\/permsecure.com\/wp-content\/uploads\/0202\/09\/Group-184-300x200.png 300w, https:\/\/permsecure.com\/wp-content\/uploads\/0202\/09\/Group-184-1024x683.png 1024w, https:\/\/permsecure.com\/wp-content\/uploads\/0202\/09\/Group-184-768x512.png 768w\" sizes=\"auto, (max-width: 1501px) 100vw, 1501px\" \/><\/a><\/figure>\n\n\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow padding-inline-C0G1 padding-top-1em\"><div class=\"taxonomy-category has-link-color wp-elements-0b7e5c6f257c8288261c58591ca334de wp-block-post-terms has-text-color has-basics-6-color padding-bottom-0_5em pointer-events-none text-decoration-none\"><a href=\"https:\/\/permsecure.com\/en\/wissen\/#category-iam-en\/\" rel=\"tag\">IAM<\/a><span class=\"wp-block-post-terms__separator\">, <\/span><a href=\"https:\/\/permsecure.com\/en\/wissen\/#category-whitepaper-en\/\" rel=\"tag\">Whitepaper<\/a><\/div>\n\n<h2 class=\"has-link-color wp-elements-211ad1cc0f2e5d4e47476b0f3c1e7f56 wp-block-post-title has-text-color has-basics-6-color has-h-4-font-size\"><a href=\"https:\/\/permsecure.com\/en\/whitepaper-with-milesstones-to-success-iam-implementation\/\" target=\"_self\" >Whitepaper &#8211; Identity &amp; Acce&shy;\u00ad\u00adss Management \u2013 With Milesstones to Success<\/a><\/h2>\n\n<div class=\"wp-block-post-excerpt padding-bottom-1em\"><p class=\"wp-block-post-excerpt__excerpt\">This whitepaper explains the introduction of identity &amp; access management systems. In particular, the various topics relating to people, resources and their interaction are examined and explained in more detail. The individual phases in the implementation of an IAM system are described and the various<\/p><p class=\"wp-block-post-excerpt__more-text\"><a class=\"wp-block-post-excerpt__more-link\" href=\"https:\/\/permsecure.com\/en\/whitepaper-with-milesstones-to-success-iam-implementation\/\">Show full article<\/a><\/p><\/div><\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-ad2f72ca wp-block-group-is-layout-flex padding-inline-C0G1\"><div class=\"wp-block-avatar\"><img alt='Bartosz Grodzicki Avatar' src='https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/cropped-Bartosz-Grodzicki-circle-portrait-50x50.png' srcset='https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/cropped-Bartosz-Grodzicki-circle-portrait-100x100.png 2x' class='avatar avatar-50 photo wp-block-avatar__image' height='50' width='50' \/><\/div>\n\n\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow padding-left-0_5em\"><div class=\"wp-block-post-date has-copy-s-font-size\"><time datetime=\"2023-12-13T14:23:07+00:00\">13.12.2023<\/time><\/div>\n\n<div class=\"wp-block-post-author-name has-copy-s-font-size\">Bartosz Grodzicki<\/div><\/div>\n<\/div>\n<\/div>\n\n<\/li><li class=\"wp-block-post post-3753 post type-post status-publish format-standard has-post-thumbnail hentry category-whitepaper-en-2 tag-whitepaper-en\">\n\n<div class=\"wp-block-group has-border-color has-full-white-background-color has-background is-layout-flow wp-block-group-is-layout-flow display-flex flex-flow-column margin-bottom-M-C0G1 overflow-hidden padding-bottom-C0G1 width-C4G0 width-M-C12G0 display-flex flex-flow-M-column flex-flow-row justify-content-space-between\" style=\"border-color:var(--theme-color-basics-2);border-width:1px;border-radius:7px;\"><figure class=\"wp-block-post-featured-image padding-left-M-C0G1 padding-left-S-C0G0 padding-top-M-C0G1 padding-top-S-C0G0 width-M-C6G0 width-S-C12G0\"><a href=\"https:\/\/permsecure.com\/en\/whitepaper-identity-access-management-software-anbieter-vergleich\/\" target=\"_self\"  ><img loading=\"lazy\" decoding=\"async\" width=\"1536\" height=\"1024\" src=\"https:\/\/permsecure.com\/wp-content\/uploads\/2023\/12\/iam-paper-header.png\" class=\"attachment-post-thumbnail size-post-thumbnail wp-post-image\" alt=\"Whitepaper \u2013 Identity &amp; Access Management Software: Providers &amp; Comparison\" style=\"object-fit:cover;\" srcset=\"https:\/\/permsecure.com\/wp-content\/uploads\/2023\/12\/iam-paper-header.png 1536w, https:\/\/permsecure.com\/wp-content\/uploads\/2023\/12\/iam-paper-header-300x200.png 300w, https:\/\/permsecure.com\/wp-content\/uploads\/2023\/12\/iam-paper-header-1024x683.png 1024w, https:\/\/permsecure.com\/wp-content\/uploads\/2023\/12\/iam-paper-header-768x512.png 768w\" sizes=\"auto, (max-width: 1536px) 100vw, 1536px\" \/><\/a><\/figure>\n\n\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow padding-inline-C0G1 padding-top-1em\"><div class=\"taxonomy-category has-link-color wp-elements-0b7e5c6f257c8288261c58591ca334de wp-block-post-terms has-text-color has-basics-6-color padding-bottom-0_5em pointer-events-none text-decoration-none\"><a href=\"https:\/\/permsecure.com\/en\/wissen\/#category-whitepaper-en-2\/\" rel=\"tag\">Whitepaper<\/a><\/div>\n\n<h2 class=\"has-link-color wp-elements-211ad1cc0f2e5d4e47476b0f3c1e7f56 wp-block-post-title has-text-color has-basics-6-color has-h-4-font-size\"><a href=\"https:\/\/permsecure.com\/en\/whitepaper-identity-access-management-software-anbieter-vergleich\/\" target=\"_self\" >Whitepaper \u2013 Identity &amp; Access Management Software: Providers &amp; Comparison<\/a><\/h2>\n\n<div class=\"wp-block-post-excerpt padding-bottom-1em\"><p class=\"wp-block-post-excerpt__excerpt\">For many companies, implementing an Identity &amp; Access Management (IAM) system is becoming increasingly important. Companies often realise that they need to optimise their user and access permissions to gain better visibility, streamline processes, reduce the workload on their IT departments and, last but<\/p><p class=\"wp-block-post-excerpt__more-text\"><a class=\"wp-block-post-excerpt__more-link\" href=\"https:\/\/permsecure.com\/en\/whitepaper-identity-access-management-software-anbieter-vergleich\/\">Show full article<\/a><\/p><\/div><\/div>\n\n\n\n<div class=\"wp-block-group is-nowrap is-layout-flex wp-container-core-group-is-layout-ad2f72ca wp-block-group-is-layout-flex padding-inline-C0G1\"><div class=\"wp-block-avatar\"><img alt='tenfold Software GmbH Avatar' src='https:\/\/permsecure.com\/wp-content\/uploads\/2024\/12\/cropped-tenfold-avatat-50x50.png' srcset='https:\/\/permsecure.com\/wp-content\/uploads\/2024\/12\/cropped-tenfold-avatat-100x100.png 2x' class='avatar avatar-50 photo wp-block-avatar__image' height='50' width='50' \/><\/div>\n\n\n<div class=\"wp-block-group is-layout-flow wp-block-group-is-layout-flow padding-left-0_5em\"><div class=\"wp-block-post-date has-copy-s-font-size\"><time datetime=\"2023-12-13T12:47:47+00:00\">13.12.2023<\/time><\/div>\n\n<div class=\"wp-block-post-author-name has-copy-s-font-size\">tenfold Software GmbH<\/div><\/div>\n<\/div>\n<\/div>\n\n<\/li><\/ul><\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group has-basics-1-background-color has-background is-layout-constrained wp-block-group-is-layout-constrained padding-block-pe-full padding-inline-C2G2 padding-inline-M-C0G1\">\n<h4 class=\"wp-block-heading\">Sources<\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li>EU Implementing Act on NIS2 of 27 June 2024: <a href=\"https:\/\/ec.europa.eu\/info\/law\/better-regulation\/have-your-say\/initiatives\/14241-Cybersecurity-risk-management-reporting-obligations-for-digital-infrastructure-providers-and-ICT-service-managers_en\" target=\"_blank\" rel=\"noreferrer noopener\"><em>https:\/\/ec.europa.eu\/info\/law\/better-regulation\/have-your-say\/initiatives\/14241-Cybersecurity-risk-management-reporting-obligations-for-digital-infrastructure-providers-and-ICT-service-managers_en<\/em><\/a> (last accessed on 27 May 2025)<\/li>\n\n\n\n<li>K\u00f6ller, Joe: \u201eNIS2: Security Requirements for Businesses\u201c (published on 19 July 2024): <a href=\"https:\/\/www.tenfold-security.com\/nis2-richtlinie\/\" target=\"_blank\" rel=\"noreferrer noopener\"><em>https:\/\/www.tenfold-security.com\/nis2-richtlinie\/<\/em><\/a>(last accessed on 27 May 2025)<\/li>\n\n\n\n<li>NIS2 Directive on EUR-Lex (Access to European Union Law): <a href=\"https:\/\/eur-lex.europa.eu\/eli\/dir\/2022\/2555\" target=\"_blank\" rel=\"noreferrer noopener\"><em>https:\/\/eur-lex.europa.eu\/eli\/dir\/2022\/2555<\/em><\/a> (last accessed on 27 May 2025)<\/li>\n\n\n\n<li>\u201cNIS2 Directive: New Rules on Cybersecurity of Network and Information Systems\u201d: <a href=\"https:\/\/digital-strategy.ec.europa.eu\/de\/policies\/nis2-directive\" target=\"_blank\" rel=\"noreferrer noopener\"><em>https:\/\/digital-strategy.ec.europa.eu\/de\/policies\/nis2-directive<\/em><\/a>(last accessed on 27 May 2025)<\/li>\n\n\n\n<li>OpenKRITIS: \u201cFines for Critical Infrastructure Operators\u201d: <a href=\"https:\/\/www.openkritis.de\/betreiber\/bussgelder-kritis-bsig.html\" target=\"_blank\" rel=\"noreferrer noopener\"><em>https:\/\/www.openkritis.de\/betreiber\/bussgelder-kritis-bsig.html<\/em><\/a> (last accessed on 27 May 2025)<\/li>\n<\/ul>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>In key sectors of the economy, such as energy, IT, transport and water supply, the NIS2 Directive aims to establish uniform security standards across the EU and ensure the resilience of IT systems, both physically and digitally. But what does this mean in practice&hellip;<\/p>\n","protected":false},"author":2,"featured_media":3871,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[42],"tags":[],"class_list":["post-3866","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-iam-en"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>NIS2-Richtlinie NIS2 Directive: Requirements &amp; Conditions - permSECURE GmbH<\/title>\n<meta name=\"description\" content=\"What does the NIS2 Directive cover, and which companies are affected? What specific measures must they implement? Find out here.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/permsecure.com\/en\/nis2-richtlinie-nis2-directive-requirements-conditions\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"NIS2-Richtlinie NIS2 Directive: Requirements &amp; Conditions - permSECURE GmbH\" \/>\n<meta property=\"og:description\" content=\"What does the NIS2 Directive cover, and which companies are affected? What specific measures must they implement? Find out here.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/permsecure.com\/en\/nis2-richtlinie-nis2-directive-requirements-conditions\/\" \/>\n<meta property=\"og:site_name\" content=\"permSECURE GmbH\" \/>\n<meta property=\"article:published_time\" content=\"2025-06-04T11:55:03+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-14T11:51:38+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/permsecure.com\/wp-content\/uploads\/2025\/06\/NIS2_Richtlinien_Header-1.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"2048\" \/>\n\t<meta property=\"og:image:height\" content=\"1142\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Christoph Schulze\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christoph Schulze\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"TechArticle\",\"@id\":\"https:\\\/\\\/permsecure.com\\\/en\\\/nis2-richtlinie-nis2-directive-requirements-conditions\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/permsecure.com\\\/en\\\/nis2-richtlinie-nis2-directive-requirements-conditions\\\/\"},\"author\":{\"name\":\"Christoph Schulze\",\"@id\":\"https:\\\/\\\/permsecure.com\\\/en\\\/#\\\/schema\\\/person\\\/57b78beb019d7bb82c18d141de8f8a1e\"},\"headline\":\"NIS2 Directive: What It Means for Affected Companies\",\"datePublished\":\"2025-06-04T11:55:03+00:00\",\"dateModified\":\"2026-10-14T11:51:38+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/permsecure.com\\\/en\\\/nis2-richtlinie-nis2-directive-requirements-conditions\\\/\"},\"wordCount\":1864,\"publisher\":{\"@id\":\"https:\\\/\\\/permsecure.com\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/permsecure.com\\\/en\\\/nis2-richtlinie-nis2-directive-requirements-conditions\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/permsecure.com\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/NIS2_Richtlinien_Header-1.jpeg\",\"articleSection\":[\"IAM\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/permsecure.com\\\/en\\\/nis2-richtlinie-nis2-directive-requirements-conditions\\\/\",\"url\":\"https:\\\/\\\/permsecure.com\\\/en\\\/nis2-richtlinie-nis2-directive-requirements-conditions\\\/\",\"name\":\"NIS2-Richtlinie NIS2 Directive: Requirements & Conditions - permSECURE GmbH\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/permsecure.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/permsecure.com\\\/en\\\/nis2-richtlinie-nis2-directive-requirements-conditions\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/permsecure.com\\\/en\\\/nis2-richtlinie-nis2-directive-requirements-conditions\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/permsecure.com\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/NIS2_Richtlinien_Header-1.jpeg\",\"datePublished\":\"2025-06-04T11:55:03+00:00\",\"dateModified\":\"2026-10-14T11:51:38+00:00\",\"description\":\"What does the NIS2 Directive cover, and which companies are affected? What specific measures must they implement? Find out here.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/permsecure.com\\\/en\\\/nis2-richtlinie-nis2-directive-requirements-conditions\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/permsecure.com\\\/en\\\/nis2-richtlinie-nis2-directive-requirements-conditions\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/permsecure.com\\\/en\\\/nis2-richtlinie-nis2-directive-requirements-conditions\\\/#primaryimage\",\"url\":\"https:\\\/\\\/permsecure.com\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/NIS2_Richtlinien_Header-1.jpeg\",\"contentUrl\":\"https:\\\/\\\/permsecure.com\\\/wp-content\\\/uploads\\\/2025\\\/06\\\/NIS2_Richtlinien_Header-1.jpeg\",\"width\":2048,\"height\":1142},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/permsecure.com\\\/en\\\/nis2-richtlinie-nis2-directive-requirements-conditions\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/permsecure.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"NIS2 Directive: What It Means for Affected Companies\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/permsecure.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/permsecure.com\\\/en\\\/\",\"name\":\"permSECURE GmbH - development\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/permsecure.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/permsecure.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/permsecure.com\\\/en\\\/#organization\",\"name\":\"permSECURE GmbH - development\",\"url\":\"https:\\\/\\\/permsecure.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/permsecure.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/permsecure.com\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/PermSecure-Logo.png\",\"contentUrl\":\"https:\\\/\\\/permsecure.com\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/PermSecure-Logo.png\",\"width\":193,\"height\":206,\"caption\":\"permSECURE GmbH - development\"},\"image\":{\"@id\":\"https:\\\/\\\/permsecure.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/permsecure.com\\\/en\\\/#\\\/schema\\\/person\\\/57b78beb019d7bb82c18d141de8f8a1e\",\"name\":\"Christoph Schulze\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/permsecure.com\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/cropped-Christoph-Schulze-Circle-Portrait-96x96.png\",\"url\":\"https:\\\/\\\/permsecure.com\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/cropped-Christoph-Schulze-Circle-Portrait-96x96.png\",\"contentUrl\":\"https:\\\/\\\/permsecure.com\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/cropped-Christoph-Schulze-Circle-Portrait-96x96.png\",\"caption\":\"Christoph Schulze\"},\"description\":\"Christoph Schulze ist Senior Consultant bei der Firma permSECURE. Bereits seit 2011 konzeptioniert und begleitet er File Server Projekte und unterst\u00fctzt Kunden dabei ihre Berechtigungskonzepte zu optimieren.\",\"url\":\"https:\\\/\\\/permsecure.com\\\/en\\\/author\\\/christoph\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"NIS2-Richtlinie NIS2 Directive: Requirements & Conditions - permSECURE GmbH","description":"What does the NIS2 Directive cover, and which companies are affected? What specific measures must they implement? Find out here.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/permsecure.com\/en\/nis2-richtlinie-nis2-directive-requirements-conditions\/","og_locale":"en_US","og_type":"article","og_title":"NIS2-Richtlinie NIS2 Directive: Requirements & Conditions - permSECURE GmbH","og_description":"What does the NIS2 Directive cover, and which companies are affected? What specific measures must they implement? Find out here.","og_url":"https:\/\/permsecure.com\/en\/nis2-richtlinie-nis2-directive-requirements-conditions\/","og_site_name":"permSECURE GmbH","article_published_time":"2025-06-04T11:55:03+00:00","article_modified_time":"2026-10-14T11:51:38+00:00","og_image":[{"width":2048,"height":1142,"url":"https:\/\/permsecure.com\/wp-content\/uploads\/2025\/06\/NIS2_Richtlinien_Header-1.jpeg","type":"image\/jpeg"}],"author":"Christoph Schulze","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Christoph Schulze","Est. reading time":"11 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"TechArticle","@id":"https:\/\/permsecure.com\/en\/nis2-richtlinie-nis2-directive-requirements-conditions\/#article","isPartOf":{"@id":"https:\/\/permsecure.com\/en\/nis2-richtlinie-nis2-directive-requirements-conditions\/"},"author":{"name":"Christoph Schulze","@id":"https:\/\/permsecure.com\/en\/#\/schema\/person\/57b78beb019d7bb82c18d141de8f8a1e"},"headline":"NIS2 Directive: What It Means for Affected Companies","datePublished":"2025-06-04T11:55:03+00:00","dateModified":"2026-10-14T11:51:38+00:00","mainEntityOfPage":{"@id":"https:\/\/permsecure.com\/en\/nis2-richtlinie-nis2-directive-requirements-conditions\/"},"wordCount":1864,"publisher":{"@id":"https:\/\/permsecure.com\/en\/#organization"},"image":{"@id":"https:\/\/permsecure.com\/en\/nis2-richtlinie-nis2-directive-requirements-conditions\/#primaryimage"},"thumbnailUrl":"https:\/\/permsecure.com\/wp-content\/uploads\/2025\/06\/NIS2_Richtlinien_Header-1.jpeg","articleSection":["IAM"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/permsecure.com\/en\/nis2-richtlinie-nis2-directive-requirements-conditions\/","url":"https:\/\/permsecure.com\/en\/nis2-richtlinie-nis2-directive-requirements-conditions\/","name":"NIS2-Richtlinie NIS2 Directive: Requirements & Conditions - permSECURE GmbH","isPartOf":{"@id":"https:\/\/permsecure.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/permsecure.com\/en\/nis2-richtlinie-nis2-directive-requirements-conditions\/#primaryimage"},"image":{"@id":"https:\/\/permsecure.com\/en\/nis2-richtlinie-nis2-directive-requirements-conditions\/#primaryimage"},"thumbnailUrl":"https:\/\/permsecure.com\/wp-content\/uploads\/2025\/06\/NIS2_Richtlinien_Header-1.jpeg","datePublished":"2025-06-04T11:55:03+00:00","dateModified":"2026-10-14T11:51:38+00:00","description":"What does the NIS2 Directive cover, and which companies are affected? What specific measures must they implement? Find out here.","breadcrumb":{"@id":"https:\/\/permsecure.com\/en\/nis2-richtlinie-nis2-directive-requirements-conditions\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/permsecure.com\/en\/nis2-richtlinie-nis2-directive-requirements-conditions\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/permsecure.com\/en\/nis2-richtlinie-nis2-directive-requirements-conditions\/#primaryimage","url":"https:\/\/permsecure.com\/wp-content\/uploads\/2025\/06\/NIS2_Richtlinien_Header-1.jpeg","contentUrl":"https:\/\/permsecure.com\/wp-content\/uploads\/2025\/06\/NIS2_Richtlinien_Header-1.jpeg","width":2048,"height":1142},{"@type":"BreadcrumbList","@id":"https:\/\/permsecure.com\/en\/nis2-richtlinie-nis2-directive-requirements-conditions\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/permsecure.com\/en\/"},{"@type":"ListItem","position":2,"name":"NIS2 Directive: What It Means for Affected Companies"}]},{"@type":"WebSite","@id":"https:\/\/permsecure.com\/en\/#website","url":"https:\/\/permsecure.com\/en\/","name":"permSECURE GmbH - development","description":"","publisher":{"@id":"https:\/\/permsecure.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/permsecure.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/permsecure.com\/en\/#organization","name":"permSECURE GmbH - development","url":"https:\/\/permsecure.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/permsecure.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/permsecure.com\/wp-content\/uploads\/2024\/10\/PermSecure-Logo.png","contentUrl":"https:\/\/permsecure.com\/wp-content\/uploads\/2024\/10\/PermSecure-Logo.png","width":193,"height":206,"caption":"permSECURE GmbH - development"},"image":{"@id":"https:\/\/permsecure.com\/en\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/permsecure.com\/en\/#\/schema\/person\/57b78beb019d7bb82c18d141de8f8a1e","name":"Christoph Schulze","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/cropped-Christoph-Schulze-Circle-Portrait-96x96.png","url":"https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/cropped-Christoph-Schulze-Circle-Portrait-96x96.png","contentUrl":"https:\/\/permsecure.com\/wp-content\/uploads\/2024\/11\/cropped-Christoph-Schulze-Circle-Portrait-96x96.png","caption":"Christoph Schulze"},"description":"Christoph Schulze ist Senior Consultant bei der Firma permSECURE. Bereits seit 2011 konzeptioniert und begleitet er File Server Projekte und unterst\u00fctzt Kunden dabei ihre Berechtigungskonzepte zu optimieren.","url":"https:\/\/permsecure.com\/en\/author\/christoph\/"}]}},"_links":{"self":[{"href":"https:\/\/permsecure.com\/en\/wp-json\/wp\/v2\/posts\/3866","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/permsecure.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/permsecure.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/permsecure.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/permsecure.com\/en\/wp-json\/wp\/v2\/comments?post=3866"}],"version-history":[{"count":6,"href":"https:\/\/permsecure.com\/en\/wp-json\/wp\/v2\/posts\/3866\/revisions"}],"predecessor-version":[{"id":4109,"href":"https:\/\/permsecure.com\/en\/wp-json\/wp\/v2\/posts\/3866\/revisions\/4109"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/permsecure.com\/en\/wp-json\/wp\/v2\/media\/3871"}],"wp:attachment":[{"href":"https:\/\/permsecure.com\/en\/wp-json\/wp\/v2\/media?parent=3866"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/permsecure.com\/en\/wp-json\/wp\/v2\/categories?post=3866"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/permsecure.com\/en\/wp-json\/wp\/v2\/tags?post=3866"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}