#management liability

Security awareness tips, industry news, and product updates.

Executives in a boardroom discussing the management cybersecurity training duty under Section 38 BSIG
Security Awareness TipsCompliance & Regulations

Section 38 BSIG: German Managers Must Train on Cyber Risk

Germany's new BSIG makes cybersecurity training a personal, non-delegable duty for the management of regulated entities, backed by personal liability for oversight failures. The BSI has now spelled out what the training must cover and recommends an annual cadence.

Thomas Eriksson·8/22/2026·5 min read