IT Security Resources & Whitepapers

The NIS2 Directive (Network and Information Security Directive 2) is an EU directive that strengthens cybersecurity across Europe. It applies to companies and organisations in 18 critical sectors, including energy, transport, healthcare, digital infrastructure and public administration. Companies in these sectors with 50 or more employees or annual revenue of at least €10 million are generally covered by the directive. Transposed into national law, it has been binding since 6. Dezember 2025.

Non-compliance with the NIS2 requirements can result in substantial penalties. Essential entities face fines of up to €10 million or 2% of their total worldwide annual revenue, while important entities face up to €7 million or 1.4% of annual revenue. In addition, the competent authorities can issue binding instructions and, in the event of serious breaches, even hold management personally liable.

An information security management system (ISMS) is a systematic approach to managing sensitive company information. It comprises policies, processes, procedures and technical measures to protect the confidentiality, integrity and availability of information. An ISMS is the foundation for certifications such as ISO 27001 and helps you meet regulatory requirements like NIS2 or KRITIS in a systematic way. It reduces the risk of security incidents and builds trust with customers and partners.

The duration of an ISO 27001 implementation depends on the size and complexity of your company. For a mid-sized company we typically allow 6 to 12 months until you are ready for certification. This includes the initial gap analysis, developing the ISMS, implementing the required measures, internal audits and preparing for the certification audit. We guide you through the entire process and make sure your organisation is optimally prepared.

DLAU stands out through the combination of sound technical expertise and practical, hands-on consulting. Our consultants have proven experience across a range of industries and roles, including the public sector, energy, healthcare and defence. We do not develop theoretical concepts but solutions that work under pressure too. Our approach is holistic: from the initial analysis through implementation to ongoing monitoring, we support you as a reliable partner.