TeamViewer failed to publicly disclose a cyberattack by Russian hackers in accordance with WpHG requirements, for which BaFin imposed an administrative fine.
CGI and Heuking combine legal compliance consulting with technical implementation to translate regulatory requirements such as NIS2 into secure, workable systems.
Starting in September 2024, the Cyber Resilience Act mandates the reporting of security vulnerabilities within 24 hours to authorities, requiring fundamentally changed incident response processes.
Compliance teams must meet several NIS2 deadlines in the coming summer months to avoid penalties and fulfil the statutory requirement for IT security in critical sectors.
Traditional code signing does not protect against manipulation during the build process; ephemeral environments with short-lived keys and Sigstore offer more effective security.
