Germany: Cybersecurity

The EU Cyber Resilience Act introduces strict cybersecurity reporting requirements for manufacturers of connected products, with deadlines as tight as 24 hours for early warnings of actively exploited vulnerabilities and severe incidents. Manufacturers must navigate parallel obligations across multiple regulatory frameworks while facing penalties of up to EUR 15 million or 2.5% of global turnover for non-compliance.

The NIS2 Directive (Directive (EU) 2022/2555) is intended to harmonize the level of cybersecurity within the EU and strengthen the digital resilience of critical sectors (for more information, please see our previous GT Alert on the EU NIS2 Directive).

How can companies use artificial intelligence to respond more efficiently to threats, and what innovative attack methods are hackers developing...