Glossary
Article 20
The NIS2 provision requiring management bodies to approve, oversee, and be trained on cybersecurity risk measures.
Explained in depth: NIS2 penalties and management liability
Unlike most cybersecurity law, Article 20 introduces personal liability for management body members if adequate measures aren't in place. It also requires management to follow training regularly and to offer similar training to staff.