AI

If you’re an automotive supplier preparing for TISAX certification, your firewall documentation will be under the microscope. TISAX firewall requirements define exactly what auditors expect—and most suppliers aren’t prepared. The VDA (Verband der Automobilindustrie) created TISAX to protect sensitive vehicle data across the supply chain. Every firewall rule, every change, every exception must be documented…

ISO 27001 vs NIS2—which framework does your German company need? The answer increasingly is “both,” but understanding the differences helps you prioritize and avoid duplicate effort. ISO 27001 has been the gold standard for information security management for two decades. NIS2 is the EU’s new mandatory cybersecurity regulation taking effect in 2026. They overlap significantly—but…

NIS2 Penalties Germany go far beyond the headline fine numbers. Yes, regulators can impose €10 million penalties or 2% of global turnover. But the hidden costs—operational restrictions, management bans, reputational damage, and customer loss—often exceed fines by 5-10x. When the BSI (Federal Office for Information Security) finds non-compliance, financial penalties are just one tool in…