Talks and training
NIS2 made clear for management.
For economic development agencies, chambers, associations and networks: talks and training after which guests know whether they are in scope and what to do now. No jargon, no scaremongering, with a result to take home.
Main talk
Are we in scope, and what does management have to do now?
Germany's new BSI Act has applied since December 2025. Many companies do not know whether it covers them, and the duties fall on management personally. The talk brings clarity instead of worry and shows what is proportionate.
What guests take home
- Their own first assessment from the quick check
- Management duties on one page
- A list of first steps with deadlines
- The way to free support from the state of NRW
45 minutes
- 10′
In scope or not?
Size, activity, special cases. Guests take the quick check live on their phones.
- 10′
What management owes
Implement, oversee, get trained. Why this responsibility cannot be delegated.
- 10′
Ten areas, proportionate
What section 30 BSIG requires, what usually exists already and what may deliberately be kept simple.
- 5′
First steps
Registration, a reporting channel for significant incidents, an emergency card for day one, and where to find free support, such as the NRW NIS2 contact point.
- 10′
Questions from the floor
In our experience the most valuable part.
Formats
20 minutes
Short input
For breakfasts, regulars' tables and as one item among other contributions.
45 minutes
Talk
The main talk with live quick check and questions.
90 minutes
Open evening
Talk, questions and time for conversations at tables by sector.
half a day
Management training
For the training duty under section 38 (3) BSIG, with certificate of attendance.
Further topics
AI in the company, and what the EU AI Act requires
Which AI is running in-house, including in purchased software, and which duties apply already.
When IT stops
Contingency planning with a sense of proportion. Which processes must come back first and how to rehearse it.
Information security down to the shop floor
Where scopes end and remote maintenance access stays open.

Speaker
Sascha Geeren
GEEREN AI SYSTEMS, Gladbeck
From regulated pharmaceutical production, where every change to a system has to stand up to an inspector. Today he brings this way of providing evidence to information security, business continuity and AI.
He speaks from the practice of production and IT, not from slides, and also says what is not needed.
Selected qualifications
- ISO/IEC 27001:2022 Lead Auditor
- ISO/IEC 42001:2023 Lead Implementer
- BSI IT-Grundschutz Practitioner
- BSI BCM Practitioner
For organisers
- Content and length are tailored to your audience and programme.
- Neutral and without selling. Legal questions are flagged, not advised on.
- A projector and screen are needed; the quick check runs on guests' phones.
- Happy to alternate with other contributions, for example from technology, law or public authorities.
Reply within one working day.
Contact: sascha@geeren.net · geeren.net/en/talksNIS2 quick check: geeren.net/en/nis2-check