NIS2 · pillar 3 of 6
Governance — who signs
The management body approves the measures, oversees them, and can be held liable for them.
- 7 The management body approves and oversees The measures are not something the security team adopts on the organisation's behalf. The management body must approve…
- 8 Managers can be held personally liable Article 20(1) requires Member States to ensure that members of the management body can be held liable for a failure to…
- 9 The training duty reaches the board Members of the management body are required to follow training in order to identify risks and assess cybersecurity…
Start this pillar See the whole map
Sources: Directive (EU) 2022/2555 (NIS2), Belgian law of 26 April 2024 establishing a framework for the cybersecurity of networks and information systems, Centre for Cybersecurity Belgium — NIS2 and CyberFundamentals. Written from those texts and last checked on against reporting on them — not read line by line against the primary documents. Every card names the clause it comes from precisely so you can settle it at the source, and [email protected] is where a correction goes.