Governance

Article 20 duties of the management body: approving and overseeing the Article 21 measures, liability for infringements, and mandatory cybersecurity training for management body members.

Article 20(1) Management body approval and oversight

The management body's duty to approve the entity's cybersecurity risk-management measures and oversee their implementation, and how Implementing Regulation 2024/2690 turns this into policy approval, reporting lines and risk acceptance.

Article 20(1) Management body liability

How NIS2 makes management bodies and legal representatives answerable for Article 21 infringements, including the temporary ban on managerial functions available against essential entities.

Talk to our team.

Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.

  • 30-minute call: free, with no obligation.
  • NDA on request: we can sign before you share details.
  • Clear next steps: a scope and plan after the call.