With EU NIST 2 and DORA requiring board and staff education, the Federal Office for Information Security (BSI) is taking a strong position.