BSides Munich 2026 · Talk

Beyond the Checkbox: Can Your NIS-2 Evidence Survive Reality?

Thanks for joining the talk. Here are the materials — no signup needed.

All organisations, people and records in these materials are synthetic.

Practise it yourself

I'm building hands-on GRC cases based on this approach: a fictional company, realistic evidence, and you decide what actually holds up.

  • Test a "Yes" from a self-assessment against the evidence
  • Request more evidence like in a real assessment — but only a few times
  • Rate design, operation and effectiveness, then compare with a reference solution

Want to know when the first one is ready? Email me at younes@ahmadzei.de.