{"id":43029,"date":"2026-05-11T13:20:26","date_gmt":"2026-05-11T13:20:26","guid":{"rendered":"https:\/\/3-core.de\/?p=43029"},"modified":"2026-05-11T13:26:23","modified_gmt":"2026-05-11T13:26:23","slug":"nis2-implementation","status":"publish","type":"post","link":"https:\/\/3-core.de\/en\/blog-en\/nis2-implementation\/","title":{"rendered":"NIS2 implementation: obligations and sanctions"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"43029\" class=\"elementor elementor-43029 elementor-41871\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"has_eae_slider elementor-section elementor-top-section elementor-element elementor-element-2abfe6e5 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-eae-slider=\"87916\" data-id=\"2abfe6e5\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-279816c4\" data-eae-slider=\"5620\" data-id=\"279816c4\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4779c4ec elementor-widget elementor-widget-theme-post-featured-image elementor-widget-image\" data-id=\"4779c4ec\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"theme-post-featured-image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"800\" height=\"450\" src=\"https:\/\/3-core.de\/wp-content\/uploads\/2026\/03\/3-core-2024-083-800x450.jpg\" class=\"attachment-ocean-thumb-ml size-ocean-thumb-ml wp-image-41874\" alt=\"Two people in business attire are seated at a desk, discussing NIS2 implementation while looking at a computer monitor. One points to the screen as the other takes notes. A coffee mug and a small plant are also on the desk.\" title=\"\">\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"has_eae_slider elementor-section elementor-top-section elementor-element elementor-element-7808a17b elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-eae-slider=\"40365\" data-id=\"7808a17b\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-660e61f8\" data-eae-slider=\"42668\" data-id=\"660e61f8\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6599a9ed elementor-widget elementor-widget-theme-post-title elementor-page-title elementor-widget-heading\" data-id=\"6599a9ed\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"theme-post-title.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">NIS2 implementation: obligations and sanctions<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"has_eae_slider elementor-section elementor-top-section elementor-element elementor-element-352b5341 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-eae-slider=\"4903\" data-id=\"352b5341\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-28196594\" data-eae-slider=\"77853\" data-id=\"28196594\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-34bcfc29 elementor-widget elementor-widget-text-editor\" data-id=\"34bcfc29\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>NIS2 affects far more organisations than many assume. In Germany, its implementation introduces binding new requirements for cybersecurity, incident reporting, risk management and management accountability. For organisations in scope, this means reassessing security not only from a technical perspective, but also in terms of governance, organisational arrangements and documentation.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"has_eae_slider elementor-section elementor-top-section elementor-element elementor-element-b20c477 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-eae-slider=\"38889\" data-id=\"b20c477\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-33 elementor-top-column elementor-element elementor-element-abc4397\" data-eae-slider=\"62736\" data-id=\"abc4397\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap\">\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-33 elementor-top-column elementor-element elementor-element-7b5bcf2\" data-eae-slider=\"81994\" data-id=\"7b5bcf2\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-ee1df37 elementor-widget__width-initial elementor-cta--skin-classic elementor-animated-content elementor-bg-transform elementor-bg-transform-zoom-in elementor-widget elementor-widget-call-to-action\" data-id=\"ee1df37\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"call-to-action.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-cta\">\n\t\t\t\t\t<div class=\"elementor-cta__bg-wrapper\">\n\t\t\t\t<div class=\"elementor-cta__bg elementor-bg\" style=\"background-image: url(https:\/\/3-core.de\/wp-content\/uploads\/2025\/12\/Image_3-core-GmbH_Download_NIS2-Umsetzungsgesetz_EN-768x532.jpg);\" role=\"img\" aria-label=\"A flowchart icon appears on the left, with the text NIS2UmsuCG SMART implemented on the right. The background is dark gray, and 3_core is written at the bottom\u2014referencing the NIS-2 Directive for companies.\"><\/div>\n\t\t\t\t<div class=\"elementor-cta__bg-overlay\"><\/div>\n\t\t\t<\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-cta__content\">\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<h2 class=\"elementor-cta__title elementor-cta__content-item elementor-content-item\">\n\t\t\t\t\t\tDownload the free NIS2 guide now\t\t\t\t\t<\/h2>\n\t\t\t\t\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-cta__button-wrapper elementor-cta__content-item elementor-content-item \">\n\t\t\t\t\t<a class=\"elementor-cta__button elementor-button elementor-size-\" href=\"https:\/\/3-core.de\/en\/download-guide-nis2-directive-implementation-act\/\">\n\t\t\t\t\t\tDOWNLOAD\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-33 elementor-top-column elementor-element elementor-element-3e2091a\" data-eae-slider=\"7231\" data-id=\"3e2091a\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap\">\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"has_eae_slider elementor-section elementor-top-section elementor-element elementor-element-2a54a21e elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-eae-slider=\"30509\" data-id=\"2a54a21e\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-73d09077\" data-eae-slider=\"82318\" data-id=\"73d09077\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7655c09c elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-image\" data-id=\"7655c09c\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInLeft&quot;}\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/3-core.de\/en\/blog-englisch\/nis2-implementation-act-congress\/\">\n\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"687\" src=\"https:\/\/3-core.de\/wp-content\/uploads\/2026\/01\/aaa1762846871609.jpg\" class=\"attachment-2048x2048 size-2048x2048 wp-image-40061\" alt=\"A man in a suit speaks on stage at a conference for operators of critical infrastructure, speaking into a microphone. The on screen text introduces Stefan Erdweg, Managing Director of 3 core GmbH. The PROTEKT 2025 event logo and the dates appear in the lower right corner.\" srcset=\"https:\/\/3-core.de\/wp-content\/uploads\/2026\/01\/aaa1762846871609.jpg 800w, https:\/\/3-core.de\/wp-content\/uploads\/2026\/01\/aaa1762846871609-300x258.jpg 300w, https:\/\/3-core.de\/wp-content\/uploads\/2026\/01\/aaa1762846871609-768x660.jpg 768w\" sizes=\"(max-width: 800px) 100vw, 800px\" title=\"\">\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-69a2fd18\" data-eae-slider=\"43131\" data-id=\"69a2fd18\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-559b731d elementor-widget__width-inherit elementor-invisible elementor-widget elementor-widget-text-editor\" data-id=\"559b731d\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInRight&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>By working with 3-core, organisations benefit from extensive expertise in KRITIS and NIS2. We support them in integrating NIS2 requirements into their existing processes in a structured, efficient and practical way. Drawing on our experience in the KRITIS environment, we understand what matters when it comes to regulatory requirements, robust security measures, clear documentation and governance that works in practice. In this way, we help our clients not only achieve greater regulatory certainty, but also build resilient structures that support long-term resilience and sustainable cybersecurity.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"has_eae_slider elementor-section elementor-top-section elementor-element elementor-element-6a03ab39 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-eae-slider=\"76767\" data-id=\"6a03ab39\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-5c04db71\" data-eae-slider=\"81722\" data-id=\"5c04db71\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-81aa1ac elementor-widget elementor-widget-text-editor\" data-id=\"81aa1ac\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2 data-start=\"83\" data-end=\"143\">Why NIS2 implementation is so relevant for organisations<\/h2><p data-start=\"145\" data-end=\"818\"><a href=\"https:\/\/3-core.de\/en\/kritis-umbrella-act-and-nis-2-directive-companies\/\">NIS2 implementation<\/a> significantly expands the number of organisations within scope. In addition to operators of critical infrastructure, essential and important entities now also come into focus. This makes one thing clear: cybersecurity is no longer an issue only for traditional critical infrastructure, but for many medium-sized and large organisations operating in defined sectors. At the same time, the new rules require the implementation of cybersecurity risk-management measures, the continuous review of compliance, and the reporting of significant incidents. Non-compliance may result in substantial administrative fines.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"has_eae_slider elementor-section elementor-top-section elementor-element elementor-element-6b2f024 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-eae-slider=\"2282\" data-id=\"6b2f024\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-33 elementor-top-column elementor-element elementor-element-8a82729\" data-eae-slider=\"79094\" data-id=\"8a82729\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-b251ca1 elementor-view-default elementor-widget elementor-widget-icon\" data-id=\"b251ca1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-icon-wrapper\">\n\t\t\t<div class=\"elementor-icon\">\n\t\t\t<i aria-hidden=\"true\" class=\"far fa-hospital\"><\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-045666c elementor-invisible elementor-widget elementor-widget-text-editor\" data-id=\"045666c\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInRight&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3 data-section-id=\"1kt6ngk\" data-start=\"2195\" data-end=\"2219\">KRITIS-Entities<\/h3>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2cfce82 elementor-invisible elementor-widget elementor-widget-text-editor\" data-id=\"2cfce82\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInRight&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-start=\"2221\" data-end=\"2484\">KRITIS entities include organisations responsible for essential services and critical infrastructure whose disruption would have significant consequences for public safety or the public welfare.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-33 elementor-top-column elementor-element elementor-element-3561f59\" data-eae-slider=\"17931\" data-id=\"3561f59\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e1905d2 elementor-view-default elementor-widget elementor-widget-icon\" data-id=\"e1905d2\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-icon-wrapper\">\n\t\t\t<div class=\"elementor-icon\">\n\t\t\t<i aria-hidden=\"true\" class=\"far fa-building\"><\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-68ce897 elementor-invisible elementor-widget elementor-widget-text-editor\" data-id=\"68ce897\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInRight&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3 data-section-id=\"1kt6ngk\" data-start=\"2195\" data-end=\"2219\">Important Entities<\/h3>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-aedf249 elementor-invisible elementor-widget elementor-widget-text-editor\" data-id=\"aedf249\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInRight&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-start=\"2221\" data-end=\"2484\">Important entities are generally medium-sized undertakings with at least 50 employees and either an annual turnover of more than EUR 10 million or an annual balance sheet total of more than EUR 10 million, provided that they operate in one of the defined sectors. Providers of certain specific services may also fall within this category.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-33 elementor-top-column elementor-element elementor-element-4dba3bb\" data-eae-slider=\"8539\" data-id=\"4dba3bb\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-62b53ce elementor-view-default elementor-widget elementor-widget-icon\" data-id=\"62b53ce\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"icon.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-icon-wrapper\">\n\t\t\t<div class=\"elementor-icon\">\n\t\t\t<i aria-hidden=\"true\" class=\"far fa-bell\"><\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a890855 elementor-invisible elementor-widget elementor-widget-text-editor\" data-id=\"a890855\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInRight&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3 data-section-id=\"1kt6ngk\" data-start=\"2195\" data-end=\"2219\">Essential Entities<\/h3>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3cc2ca1 elementor-invisible elementor-widget elementor-widget-text-editor\" data-id=\"3cc2ca1\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInRight&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-start=\"2221\" data-end=\"2484\">Essential entities generally include large undertakings with at least 250 employees, annual turnover of more than EUR 50 million, or an annual balance sheet total of more than EUR 43 million, as well as organisations operating in certain additional sectors. Providers of certain specific services and operators of critical infrastructure may also fall within this category.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"has_eae_slider elementor-section elementor-top-section elementor-element elementor-element-52b7aec5 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-eae-slider=\"53528\" data-id=\"52b7aec5\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-5e29f6cc\" data-eae-slider=\"4726\" data-id=\"5e29f6cc\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-b09289e elementor-invisible elementor-widget elementor-widget-text-editor\" data-id=\"b09289e\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInRight&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2 data-start=\"83\" data-end=\"139\">Which core requirements NIS2 implementation sets out<\/h2><p data-start=\"141\" data-end=\"327\"><a href=\"https:\/\/3-core.de\/en\/kritis-umbrella-act-and-nis-2-directive-companies\/\">NIS2 implementation<\/a> requires in-scope entities to organise cybersecurity in a comprehensive and demonstrable way. The core requirements include:<\/p><ul data-start=\"329\" data-end=\"564\"><li data-section-id=\"snrd97\" data-start=\"329\" data-end=\"380\">minimising disruption and limiting its impact<\/li><li data-section-id=\"1lqjv07\" data-start=\"381\" data-end=\"448\">taking account of the state of the art and relevant standards<\/li><li data-section-id=\"kpwh9a\" data-start=\"449\" data-end=\"487\">applying an all-hazards approach<\/li><li data-section-id=\"dovls2\" data-start=\"488\" data-end=\"518\">ensuring proportionality<\/li><li data-section-id=\"1p7natr\" data-start=\"519\" data-end=\"564\">maintaining comprehensive documentation<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"has_eae_slider elementor-section elementor-top-section elementor-element elementor-element-2ddd84e5 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-eae-slider=\"67023\" data-id=\"2ddd84e5\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-69f917c9\" data-eae-slider=\"19196\" data-id=\"69f917c9\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7379c24b elementor-view-stacked elementor-shape-square elementor-invisible elementor-widget elementor-widget-icon\" data-id=\"7379c24b\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeIn&quot;}\" data-widget_type=\"icon.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-icon-wrapper\">\n\t\t\t<a class=\"elementor-icon elementor-animation-bounce-in\" href=\"https:\/\/3-core.de\/en\/implementation-nis2\/\">\n\t\t\t<i aria-hidden=\"true\" class=\"fas fa-clipboard-list\"><\/i>\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-5473741\" data-eae-slider=\"52682\" data-id=\"5473741\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-42868fd1 elementor-widget__width-initial elementor-invisible elementor-widget elementor-widget-text-editor\" data-id=\"42868fd1\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInRight&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3 data-start=\"88\" data-end=\"147\">Cybersecurity risk-management measures<\/h3><ul data-start=\"149\" data-end=\"327\"><li data-section-id=\"h3hxnk\" data-start=\"149\" data-end=\"222\">risk analysis, security assessments, crisis management and recovery<\/li><li data-section-id=\"1trwixs\" data-start=\"223\" data-end=\"291\">supply chain security, secure IT development and cyber hygiene<\/li><li data-section-id=\"1aiqasv\" data-start=\"292\" data-end=\"327\">encryption and access control<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"has_eae_slider elementor-section elementor-top-section elementor-element elementor-element-1e3dc30c elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-eae-slider=\"94186\" data-id=\"1e3dc30c\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-1e4ea3f8\" data-eae-slider=\"33306\" data-id=\"1e4ea3f8\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7c2466c6 elementor-view-stacked elementor-shape-square elementor-invisible elementor-widget elementor-widget-icon\" data-id=\"7c2466c6\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeIn&quot;}\" data-widget_type=\"icon.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-icon-wrapper\">\n\t\t\t<a class=\"elementor-icon elementor-animation-bounce-in\" href=\"https:\/\/3-core.de\/en\/implementation-nis2\/\">\n\t\t\t<i aria-hidden=\"true\" class=\"fas fa-laptop-medical\"><\/i>\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-7abe26fa\" data-eae-slider=\"93747\" data-id=\"7abe26fa\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-25758ec3 elementor-invisible elementor-widget elementor-widget-text-editor\" data-id=\"25758ec3\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInRight&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3 data-start=\"74\" data-end=\"139\">Reporting obligations for security incidents<\/h3><ul data-start=\"141\" data-end=\"517\"><li data-section-id=\"5mx0nl\" data-start=\"141\" data-end=\"176\">early warning within 24 hours<\/li><li data-section-id=\"1qmro51\" data-start=\"177\" data-end=\"228\">updated incident notification within 72 hours<\/li><li data-section-id=\"4c8sel\" data-start=\"229\" data-end=\"392\">intermediate report if requested by the Federal Office for Information Security (BSI) or the Federal Office of Civil Protection and Disaster Assistance (BBK)<\/li><li data-section-id=\"16zhpjt\" data-start=\"393\" data-end=\"517\">final report, or progress report where the incident is ongoing, within one month<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"has_eae_slider elementor-section elementor-top-section elementor-element elementor-element-68ffab89 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-eae-slider=\"86794\" data-id=\"68ffab89\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-56a4cd43\" data-eae-slider=\"91270\" data-id=\"56a4cd43\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-28a1a2d6 elementor-view-stacked elementor-shape-square elementor-invisible elementor-widget elementor-widget-icon\" data-id=\"28a1a2d6\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeIn&quot;}\" data-widget_type=\"icon.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-icon-wrapper\">\n\t\t\t<a class=\"elementor-icon elementor-animation-bounce-in\" href=\"https:\/\/3-core.de\/en\/implementation-nis2\/\">\n\t\t\t<i aria-hidden=\"true\" class=\"fas fa-sync-alt\"><\/i>\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-6a240888\" data-eae-slider=\"93937\" data-id=\"6a240888\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-43aab1af elementor-invisible elementor-widget elementor-widget-text-editor\" data-id=\"43aab1af\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInRight&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3 data-start=\"77\" data-end=\"122\">Registration obligations<\/h3><p data-start=\"124\" data-end=\"544\">Organisations must register within three months of falling within scope. Any changes must be reported within two weeks, while supply-related key figures must be updated annually. In addition, the registration process is provided through the Federal Office for Information Security (BSI) or, where applicable, the Federal Office of Civil Protection and Disaster Assistance (BBK).<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"has_eae_slider elementor-section elementor-top-section elementor-element elementor-element-1c231358 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-eae-slider=\"54302\" data-id=\"1c231358\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-6de7bb2b\" data-eae-slider=\"67276\" data-id=\"6de7bb2b\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-3bf7fe92 elementor-view-stacked elementor-shape-square elementor-invisible elementor-widget elementor-widget-icon\" data-id=\"3bf7fe92\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeIn&quot;}\" data-widget_type=\"icon.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-icon-wrapper\">\n\t\t\t<a class=\"elementor-icon elementor-animation-bounce-in\" href=\"https:\/\/3-core.de\/en\/implementation-nis2\/\">\n\t\t\t<i aria-hidden=\"true\" class=\"fas fa-unlock-alt\"><\/i>\t\t\t<\/a>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-61780436\" data-eae-slider=\"34069\" data-id=\"61780436\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6d62ecfa elementor-invisible elementor-widget elementor-widget-text-editor\" data-id=\"6d62ecfa\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInRight&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"text-base my-auto mx-auto pb-10 [--thread-content-margin:--spacing(4)] @w-sm\/main:[--thread-content-margin:--spacing(6)] @w-lg\/main:[--thread-content-margin:--spacing(16)] px-(--thread-content-margin)\"><div class=\"[--thread-content-max-width:40rem] @w-lg\/main:[--thread-content-max-width:48rem] mx-auto max-w-(--thread-content-max-width) flex-1 group\/turn-messages focus-visible:outline-hidden relative flex w-full min-w-0 flex-col agent-turn\" tabindex=\"-1\"><div class=\"flex max-w-full flex-col grow\"><div class=\"min-h-8 text-message relative flex w-full flex-col items-end gap-2 text-start break-words whitespace-normal [.text-message+&amp;]:mt-1\" dir=\"auto\" data-message-author-role=\"assistant\" data-message-id=\"3b6ceaea-c464-4f47-9fa0-e31835ba2b56\" data-message-model-slug=\"gpt-5-2-thinking\"><div class=\"flex w-full flex-col gap-1 empty:hidden first:pt-[1px]\"><h3 data-start=\"644\" data-end=\"688\">Information obligations<\/h3><p data-start=\"690\" data-end=\"875\">Entities may be required to inform service recipients. In addition, customers should be made aware of threats and possible protective measures.<\/p><\/div><\/div><\/div><\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"has_eae_slider elementor-section elementor-top-section elementor-element elementor-element-3903eebb elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-eae-slider=\"14284\" data-id=\"3903eebb\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-6905d37d\" data-eae-slider=\"22031\" data-id=\"6905d37d\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-65588860 elementor-invisible elementor-widget elementor-widget-text-editor\" data-id=\"65588860\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInLeft&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2 data-start=\"0\" data-end=\"59\">What sanctions may apply in the event of non-compliance<\/h2><p data-start=\"61\" data-end=\"190\">Any organisation that fails to meet the requirements of NIS2 implementation may face significant consequences. These include:<\/p><ul data-start=\"192\" data-end=\"652\"><li data-section-id=\"6l3mtr\" data-start=\"192\" data-end=\"277\">administrative fines of up to EUR 10 million or 2% of annual worldwide turnover<\/li><li data-section-id=\"17qakv9\" data-start=\"278\" data-end=\"319\">coercive fines of up to EUR 100,000<\/li><li data-section-id=\"kcl5oc\" data-start=\"320\" data-end=\"379\">personal liability for members of the management body<\/li><li data-section-id=\"20omvh\" data-start=\"380\" data-end=\"467\">publication of infringements by the Federal Office for Information Security (BSI)<\/li><li data-section-id=\"xppdf2\" data-start=\"468\" data-end=\"652\">important entities that fail to meet their obligations may be subject to the same supervisory and enforcement measures as essential entities<\/li><\/ul><p data-start=\"654\" data-end=\"857\">In the most serious cases, approvals may even be withdrawn and members of the management body may be temporarily prohibited from exercising managerial functions.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-20f8ff3f\" data-eae-slider=\"44589\" data-id=\"20f8ff3f\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-1be3e595 elementor-invisible elementor-widget elementor-widget-image\" data-id=\"1be3e595\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;_animation&quot;:&quot;fadeInRight&quot;}\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"600\" height=\"600\" src=\"https:\/\/3-core.de\/wp-content\/uploads\/2025\/08\/DSC04292-600x600.jpeg\" class=\"attachment-ocean-thumb-m size-ocean-thumb-m wp-image-23530\" alt=\"Four people in business attire are gathered around a conference table, looking at a laptop. They appear engaged in discussion, possibly strategizing the implementation of the KRITIS umbrella law for critical infrastructure in a modern office setting.\" srcset=\"https:\/\/3-core.de\/wp-content\/uploads\/2025\/08\/DSC04292-600x600.jpeg 600w, https:\/\/3-core.de\/wp-content\/uploads\/2025\/08\/DSC04292-150x150.jpeg 150w\" sizes=\"(max-width: 600px) 100vw, 600px\" title=\"\">\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"has_eae_slider elementor-section elementor-top-section elementor-element elementor-element-bdc7db1 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-eae-slider=\"77555\" data-id=\"bdc7db1\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-6d29a38\" data-eae-slider=\"4394\" data-id=\"6d29a38\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e96b249 elementor-widget elementor-widget-text-editor\" data-id=\"e96b249\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"flex flex-col text-sm pb-25\"><section class=\"text-token-text-primary w-full focus:outline-none [--shadow-height:45px] has-data-writing-block:pointer-events-none has-data-writing-block:-mt-(--shadow-height) has-data-writing-block:pt-(--shadow-height) [&amp;:has([data-writing-block])&gt;*]:pointer-events-auto scroll-mt-[calc(var(--header-height)+min(200px,max(70px,20svh)))]\" dir=\"auto\" data-turn-id=\"request-69d7ab7d-b798-832b-aa5e-cfef4fbc7c19-6\" data-testid=\"conversation-turn-432\" data-scroll-anchor=\"true\" data-turn=\"assistant\"><div class=\"text-base my-auto mx-auto pb-10 [--thread-content-margin:var(--thread-content-margin-xs,calc(var(--spacing)*4))] @w-sm\/main:[--thread-content-margin:var(--thread-content-margin-sm,calc(var(--spacing)*6))] @w-lg\/main:[--thread-content-margin:var(--thread-content-margin-lg,calc(var(--spacing)*16))] px-(--thread-content-margin)\"><div class=\"[--thread-content-max-width:40rem] @w-lg\/main:[--thread-content-max-width:48rem] mx-auto max-w-(--thread-content-max-width) flex-1 group\/turn-messages focus-visible:outline-hidden relative flex w-full min-w-0 flex-col agent-turn\"><div class=\"flex max-w-full flex-col gap-4 grow\"><div class=\"min-h-8 text-message relative flex w-full flex-col items-end gap-2 text-start break-words whitespace-normal outline-none keyboard-focused:focus-ring [.text-message+&amp;]:mt-1\" dir=\"auto\" tabindex=\"0\" data-message-author-role=\"assistant\" data-message-id=\"c3fecdd9-f367-4b94-b6cb-0a9f73cd2bb7\" data-message-model-slug=\"gpt-5-4-thinking\" data-turn-start-message=\"true\"><div class=\"flex w-full flex-col gap-1 empty:hidden\"><div class=\"markdown prose dark:prose-invert w-full wrap-break-word light markdown-new-styling\"><h2 data-start=\"0\" data-end=\"36\">What organisations should do now<\/h2><p data-start=\"38\" data-end=\"451\" data-is-last-node=\"\" data-is-only-node=\"\"><a href=\"https:\/\/3-core.de\/en\/kritis-umbrella-act-and-nis-2-directive-companies\/\">NIS2 implementation<\/a> should not be seen as a mere compliance exercise. Organisations should now assess whether they fall within scope, which category applies to them, and which technical, organisational and documentation measures are already in place. Particularly important are clear responsibilities, robust reporting processes, a structured risk analysis, and proper documentation to demonstrate compliance.<\/p><\/div><\/div><\/div><\/div><\/div><\/div><\/section><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"has_eae_slider elementor-section elementor-top-section elementor-element elementor-element-1fa77366 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-eae-slider=\"70391\" data-id=\"1fa77366\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-ee0d95f\" data-eae-slider=\"94755\" data-id=\"ee0d95f\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-1f837a5c elementor-widget elementor-widget-text-editor\" data-id=\"1f837a5c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default elementor-inline-editing pen\" contenteditable=\"true\" data-elementor-setting-key=\"title\" data-pen-placeholder=\"Type Here...\">Find out more: Projects &amp; Articles<\/h2>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"has_eae_slider elementor-section elementor-top-section elementor-element elementor-element-296a6327 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-eae-slider=\"67289\" data-id=\"296a6327\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-5166c3f6\" data-eae-slider=\"78654\" data-id=\"5166c3f6\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-50f9c56a elementor-grid-3 elementor-grid-tablet-2 elementor-grid-mobile-1 elementor-posts--thumbnail-top elementor-widget elementor-widget-posts\" data-id=\"50f9c56a\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;classic_columns&quot;:&quot;3&quot;,&quot;classic_columns_tablet&quot;:&quot;2&quot;,&quot;classic_columns_mobile&quot;:&quot;1&quot;,&quot;classic_row_gap&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:35,&quot;sizes&quot;:[]},&quot;classic_row_gap_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;classic_row_gap_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]}}\" data-widget_type=\"posts.classic\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-posts-container elementor-posts elementor-posts--skin-classic elementor-grid\" role=\"list\">\n\t\t\t\t<article class=\"elementor-post elementor-grid-item post-42984 post type-post status-publish format-standard has-post-thumbnail hentry category-blog-en category-download category-download-en entry has-media\" role=\"listitem\">\n\t\t\t\t<a class=\"elementor-post__thumbnail__link\" href=\"https:\/\/3-core.de\/en\/blog-en\/emergency-plan\/\" tabindex=\"-1\" >\n\t\t\t<div class=\"elementor-post__thumbnail\"><img loading=\"lazy\" decoding=\"async\" width=\"240\" height=\"300\" src=\"https:\/\/3-core.de\/wp-content\/uploads\/2025\/08\/Bild-Stabsuebung-240x300.jpeg\" class=\"attachment-medium size-medium wp-image-23478\" alt=\"Four professionals are gathered around a table in an office setting, discussing crisis management and reviewing an emergency plan. One woman is standing beside a flipchart with notes, while the others are seated around a laptop, working together.\" title=\"\" srcset=\"https:\/\/3-core.de\/wp-content\/uploads\/2025\/08\/Bild-Stabsuebung-240x300.jpeg 240w, https:\/\/3-core.de\/wp-content\/uploads\/2025\/08\/Bild-Stabsuebung-819x1024.jpeg 819w, https:\/\/3-core.de\/wp-content\/uploads\/2025\/08\/Bild-Stabsuebung-768x960.jpeg 768w, https:\/\/3-core.de\/wp-content\/uploads\/2025\/08\/Bild-Stabsuebung-1229x1536.jpeg 1229w, https:\/\/3-core.de\/wp-content\/uploads\/2025\/08\/Bild-Stabsuebung-1638x2048.jpeg 1638w, https:\/\/3-core.de\/wp-content\/uploads\/2025\/08\/Bild-Stabsuebung-scaled.jpeg 2048w\" sizes=\"(max-width: 240px) 100vw, 240px\" \/><\/div>\n\t\t<\/a>\n\t\t\t\t<div class=\"elementor-post__text\">\n\t\t\t\t<h2 class=\"elementor-post__title\">\n\t\t\t<a href=\"https:\/\/3-core.de\/en\/blog-en\/emergency-plan\/\" >\n\t\t\t\tWhy an emergency plan is not the same as emergency management\t\t\t<\/a>\n\t\t<\/h2>\n\t\t\n\t\t<a class=\"elementor-post__read-more\" href=\"https:\/\/3-core.de\/en\/blog-en\/emergency-plan\/\" aria-label=\"Read more about Why an emergency plan is not the same as emergency management\" tabindex=\"-1\" >\n\t\t\tWeiterlesen \u00bb\t\t<\/a>\n\n\t\t\t\t<\/div>\n\t\t\t\t<\/article>\n\t\t\t\t<article class=\"elementor-post elementor-grid-item post-42934 post type-post status-publish format-standard has-post-thumbnail hentry category-blog-en category-download category-download-en entry has-media\" role=\"listitem\">\n\t\t\t\t<a class=\"elementor-post__thumbnail__link\" href=\"https:\/\/3-core.de\/en\/blog-en\/crisis-management-for-organisations\/\" tabindex=\"-1\" >\n\t\t\t<div class=\"elementor-post__thumbnail\"><img loading=\"lazy\" decoding=\"async\" width=\"300\" height=\"225\" src=\"https:\/\/3-core.de\/wp-content\/uploads\/2025\/04\/3-core-2024-174-300x225.jpg\" class=\"attachment-medium size-medium wp-image-19993\" alt=\"Three professionally dressed people stand in a hallway discussing crisis management for organisations; one woman holds a tablet and gestures while speaking to two men in suits under warm overhead lighting.\" title=\"\" srcset=\"https:\/\/3-core.de\/wp-content\/uploads\/2025\/04\/3-core-2024-174-300x225.jpg 300w, https:\/\/3-core.de\/wp-content\/uploads\/2025\/04\/3-core-2024-174-1024x768.jpg 1024w, https:\/\/3-core.de\/wp-content\/uploads\/2025\/04\/3-core-2024-174-768x576.jpg 768w, https:\/\/3-core.de\/wp-content\/uploads\/2025\/04\/3-core-2024-174-1536x1152.jpg 1536w, https:\/\/3-core.de\/wp-content\/uploads\/2025\/04\/3-core-2024-174-2048x1536.jpg 2048w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/div>\n\t\t<\/a>\n\t\t\t\t<div class=\"elementor-post__text\">\n\t\t\t\t<h2 class=\"elementor-post__title\">\n\t\t\t<a href=\"https:\/\/3-core.de\/en\/blog-en\/crisis-management-for-organisations\/\" >\n\t\t\t\tEstablishing crisis management for organisations\t\t\t<\/a>\n\t\t<\/h2>\n\t\t\n\t\t<a class=\"elementor-post__read-more\" href=\"https:\/\/3-core.de\/en\/blog-en\/crisis-management-for-organisations\/\" aria-label=\"Read more about Establishing crisis management for organisations\" tabindex=\"-1\" >\n\t\t\tWeiterlesen \u00bb\t\t<\/a>\n\n\t\t\t\t<\/div>\n\t\t\t\t<\/article>\n\t\t\t\t<article class=\"elementor-post elementor-grid-item post-43029 post type-post status-publish format-standard has-post-thumbnail hentry category-blog-en category-download entry has-media\" role=\"listitem\">\n\t\t\t\t<a class=\"elementor-post__thumbnail__link\" href=\"https:\/\/3-core.de\/en\/blog-en\/nis2-implementation\/\" tabindex=\"-1\" >\n\t\t\t<div class=\"elementor-post__thumbnail\"><img loading=\"lazy\" decoding=\"async\" width=\"240\" height=\"300\" src=\"https:\/\/3-core.de\/wp-content\/uploads\/2026\/03\/3-core-2024-083-240x300.jpg\" class=\"attachment-medium size-medium wp-image-41874\" alt=\"Two people in business attire are seated at a desk, discussing NIS2 implementation while looking at a computer monitor. One points to the screen as the other takes notes. A coffee mug and a small plant are also on the desk.\" title=\"\" srcset=\"https:\/\/3-core.de\/wp-content\/uploads\/2026\/03\/3-core-2024-083-240x300.jpg 240w, https:\/\/3-core.de\/wp-content\/uploads\/2026\/03\/3-core-2024-083-819x1024.jpg 819w, https:\/\/3-core.de\/wp-content\/uploads\/2026\/03\/3-core-2024-083-768x960.jpg 768w, https:\/\/3-core.de\/wp-content\/uploads\/2026\/03\/3-core-2024-083-1229x1536.jpg 1229w, https:\/\/3-core.de\/wp-content\/uploads\/2026\/03\/3-core-2024-083-1638x2048.jpg 1638w, https:\/\/3-core.de\/wp-content\/uploads\/2026\/03\/3-core-2024-083-scaled.jpg 2048w\" sizes=\"(max-width: 240px) 100vw, 240px\" \/><\/div>\n\t\t<\/a>\n\t\t\t\t<div class=\"elementor-post__text\">\n\t\t\t\t<h2 class=\"elementor-post__title\">\n\t\t\t<a href=\"https:\/\/3-core.de\/en\/blog-en\/nis2-implementation\/\" >\n\t\t\t\tNIS2 implementation: obligations and sanctions\t\t\t<\/a>\n\t\t<\/h2>\n\t\t\n\t\t<a class=\"elementor-post__read-more\" href=\"https:\/\/3-core.de\/en\/blog-en\/nis2-implementation\/\" aria-label=\"Read more about NIS2 implementation: obligations and sanctions\" tabindex=\"-1\" >\n\t\t\tWeiterlesen \u00bb\t\t<\/a>\n\n\t\t\t\t<\/div>\n\t\t\t\t<\/article>\n\t\t\t\t<\/div>\n\t\t\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"has_eae_slider elementor-section elementor-top-section elementor-element elementor-element-498f43ab elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-eae-slider=\"55993\" data-id=\"498f43ab\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"has_eae_slider elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-2355137c\" data-eae-slider=\"70715\" data-id=\"2355137c\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-24186 elementor-widget elementor-widget-global elementor-global-24186 elementor-widget-html\" data-id=\"24186\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div style=\"text-align: center;\">\n<a href=\"https:\/\/zeeg.me\/info6655\/30min-termin\" class=\"zeeg-popup-link\" target=\"_blank\" rel=\"noopener\">Book your Free Kickoff Call<\/a>\n<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>NIS2 affects far more organisations than many assume. In Germany,<\/p>\n","protected":false},"author":7,"featured_media":41874,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"elementor_header_footer","format":"standard","meta":{"ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"","ocean_second_sidebar":"","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"","ocean_custom_header_template":"","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"","ocean_menu_typo_font_family":"","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"default","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"","ocean_post_oembed":"","ocean_post_self_hosted_media":"","ocean_post_video_embed":"","ocean_link_format":"","ocean_link_format_target":"self","ocean_quote_format":"","ocean_quote_format_link":"post","ocean_gallery_link_images":"on","ocean_gallery_id":[],"footnotes":""},"categories":[43,179],"tags":[],"class_list":["post-43029","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog-en","category-download","entry","has-media"],"_links":{"self":[{"href":"https:\/\/3-core.de\/en\/wp-json\/wp\/v2\/posts\/43029","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/3-core.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/3-core.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/3-core.de\/en\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/3-core.de\/en\/wp-json\/wp\/v2\/comments?post=43029"}],"version-history":[{"count":20,"href":"https:\/\/3-core.de\/en\/wp-json\/wp\/v2\/posts\/43029\/revisions"}],"predecessor-version":[{"id":43815,"href":"https:\/\/3-core.de\/en\/wp-json\/wp\/v2\/posts\/43029\/revisions\/43815"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/3-core.de\/en\/wp-json\/wp\/v2\/media\/41874"}],"wp:attachment":[{"href":"https:\/\/3-core.de\/en\/wp-json\/wp\/v2\/media?parent=43029"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/3-core.de\/en\/wp-json\/wp\/v2\/categories?post=43029"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/3-core.de\/en\/wp-json\/wp\/v2\/tags?post=43029"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}