Short answer: who does NIS2 affect and what must be done?
Germany's NIS2 implementation act has applied since 6 December 2025 and covers around 29,500 entities according to the BSI; registration was due by 6 March 2026 with a grace period to 31 July 2026.
The checklist walks through the applicability check, registration, risk management, reporting duties and the role of AI agents in producing evidence.
七个检查点
这些问题都应在正式上线前回答清楚。
- 用例是否被清晰描述，并有明确业务责任人？
- 数据源、存储位置与数据流转是否已记录？
- 关键决策是否设定了明确审批？
- 业务、IT、隐私与管理层之间的角色是否已明确？
- 相关操作是否被记录并版本化？
- 是否存在回退路径与事件处理路径？
- 相关供应商与分包方是否被透明登记？
在沟通中一起走查清单
如果您愿意，我们可以围绕您的真实用例一起做结构化检查。