Overseeing and documenting implementation
Management implements the NIS2 measures, monitors them and documents that the duties are fulfilled.
Management implements the NIS2 measures, monitors them and documents that the duties are fulfilled.
Management bodies train regularly under NIS2 and DORA — and should be able to evidence it.
Under DORA, the management body defines, approves and oversees ICT risk management and assigns a third-party oversight role.
The relevant deadlines run until 2028 — from DORA via the AMLR to the high-risk duties of the EU AI Act. Investments have to pay off.
The building blocks executive management and boards can work with on the platform — each linked to its detail page.
Every regulation, risk, action and piece of evidence in your organisation in one auditable chain — with a live incident mode when things get serious.
Governance modules in the NIS2, DORA and MaRisk blueprints — from management duties to the overall risk report — mapped module by module against the current state.
The Regulation Watcher scans supervisory sources continuously and keeps the EU AI Act countdown sharp — before a deadline catches you out.
The ROI calculator shows payback period and annual benefit in two minutes; operation ranges from EU SaaS in Germany to air-gapped.
Management duties (Art. 20 / section 38 BSIG); fines up to EUR 10m / 2% of turnover.
The management body is responsible for ICT risk management.
Overall responsibility of all managing directors; overall risk report at least quarterly.
Business-wide risk assessment approved by the management body; applies from 10 July 2027.
Transparency duties since 2 August 2026 — fines up to EUR 15m or 3% of worldwide turnover.
Whether and to what extent a regulation applies to your organisation depends on size, sector and business model. This overview is orientation, not legal advice.
We show the Control Room on a sample organisation and outline which management duties are coming up for your organisation.