From October 2024, the management bodies of major or important institutions, as seen from the perspective of IT security, will be required to take part in cyber security training. This is of particular importance as the Network and Information System Security Act 2024 (NISG 2024) expressly stipulates that the members of management bodies are to be held personally liable in the event of a culpable…