CLAIM-2026-09-21-12
Section 38 BSIG obliges management bodies to implement and monitor those measures, requires them to participate regularly in training, and makes them liable for damages caused through fault.
Why it matters
The duty has a named person attached, which is what distinguishes it from an internal security backlog item.
Sources
- covingtonbu2026germany
- secjur2026nis