On 7 May 2021, the Security of Information Technology Systems (IT Security Act 2.0), including cybersecurity authority governance, was adopted. The adopted version gives the Federal Office for Information Security the authority to require companies in the special public interest and critical infrastructure operators to make organisational and technological changes to bring their cybersecurity system into compliance with the cybersecurity standards and approve applications for the IT security label.
Original source