Cybersecurity Directive: Do the obligations also apply to internal IT departments?

With the NIS2 directive (NIS2), the EU exacerbates the requirements for cyber security. This is now expressly declared a top priority, including possible personal liability of the company management. The area of ​​application is significantly expanded: In addition to classic operators of critical infrastructures, other industries are also obliged to comply with high security standards, such as chemical industry, food production and processing as well as waste management.