Business Breakfast on the NIS2-Directive

This question was addressed by over 80 participants from a wide range of industries at a Business Breakfast hosted by Eversheds Sutherland (Austria) in cooperation with the German Chamber of Commerce in Austria on February 15, 2024.

After the welcome address by Georg Röhsner, Managing Partner of Eversheds Sutherland and Thomas Gindele, Managing Director of the German Chamber of Commerce in Austria, Michael Röhsner, Partner of Eversheds Sutherland, specialising in Cybersecurity and Data protection, provided information about the new NIS2-Directive and its strict cybersecurity requirements for companies as well as the associated sanctions.

By October 17 of this year, the Directive is set to be implemented into EU Member State national law. In future, management bodies will be personally obliged to monitor the implementation of appropriate preventive measures which also include cybersecurity trainings. Non-compliance could result in severe penalties.

"The strict requirements should be taken seriously, as violations of the NIS2-Directive do not only result in high penalties. In fact, in case of non-compliance, members of the management bodies can also be held personally liable for damages caused by cyberattacks," emphasizes Michael Röhsner.

The vivid discussion that followed showed how significant this topic is for companies, even half a year before the directive comes into force. For all those, who have not dealt with the NIS2- Directive yet, make sure to implement cybersecurity measures in compliance with the minimum-security measures currently provided for in the Directive.