BSI Act
In short: The BSI Act (BSIG) governs the tasks of the Federal Office for Information Security and IT security duties, above all for critical infrastructure.
In more detail: The BSI warns about vulnerabilities and products, for example in 2022 about Kaspersky. The NIS-2 directive is implemented in Germany through a new version of the BSIG.
In Depth
Critical infrastructure (KRITIS)
Energy, water, health, transport, finance and more are subject to minimum standards and reporting duties. See NIS-2, cybersecurity.
See also: NIS2, Kaspersky, Cybersecurity