On 28 May 2021, the Security of Information Technology Systems (IT Security Act 2.0), including cybersecurity authority governance, entered into force. The Act gives the Federal Office for Information Security the authority to require companies in the special public interest and critical infrastructure operators to make organisational and technological changes to bring their cybersecurity system into compliance with the cybersecurity standards and approve applications for the IT security label.
Original source