{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T07:02:18Z","timestamp":1780556538691,"version":"3.54.1"},"reference-count":16,"publisher":"Springer Fachmedien Wiesbaden GmbH","issue":"2","license":[{"start":{"date-parts":[[2026,2,9]],"date-time":"2026-02-09T00:00:00Z","timestamp":1770595200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/deed.de"},{"start":{"date-parts":[[2026,2,9]],"date-time":"2026-02-09T00:00:00Z","timestamp":1770595200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/deed.de"}],"funder":[{"DOI":"10.13039\/501100004871","name":"Technische Universit\u00e4t Braunschweig","doi-asserted-by":"crossref","id":[{"id":"10.13039\/501100004871","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["HMD"],"published-print":{"date-parts":[[2026,4]]},"abstract":"<jats:title>Zusammenfassung<\/jats:title>\n                  <jats:p>Die Umsetzung der NIS2-Richtlinie erfordert ein integriertes Verst\u00e4ndnis von Informations- und Cybersicherheit, das strategische Steuerung, regelbasierte Nachweise, technische Ma\u00dfnahmen und Kompetenzentwicklung verbindet. Governance, Compliance, IT und Weiterbildung sind dabei komplement\u00e4re Dimensionen eines organisationalen Sicherheitsniveaus. W\u00e4hrend die Richtlinie auf EU-Ebene einen verbindlichen Erwartungshorizont setzt, kollidiert ihre Umsetzung in f\u00f6deralen Strukturen mit heterogenen Kulturen, Zielen und Kompetenzverst\u00e4ndnissen. Auf Basis einer vergleichenden Fallstudie wird gezeigt, wie die NIS2-Vorgaben als normatives Raster dienen k\u00f6nnen, um Implementierung, Sensibilisierung und Strukturen in einer Landesverwaltung kritisch zu reflektieren. Im Fokus stehen Kooperationspotenziale, Zust\u00e4ndigkeiten und divergierende Interpretationen. Ziel ist es, Potenziale und Grenzen der Sicherheitsorganisation aufzuzeigen und Impulse f\u00fcr eine kooperative Gestaltung sicherheitsbezogener Verantwortung zu geben. Die Studie zeigt, dass komplexe Abstimmungsbedarfe und Ressourcenknappheit die Umsetzung hemmen k\u00f6nnen und liefert zugleich Ansatzpunkte f\u00fcr Interventionen durch kooperative Governance.<\/jats:p>","DOI":"10.1365\/s40702-026-01248-1","type":"journal-article","created":{"date-parts":[[2026,2,9]],"date-time":"2026-02-09T12:12:22Z","timestamp":1770639142000},"page":"359-373","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Einheitliche Vorgaben, heterogene Praxis: Potenziale der NIS2-Umsetzung in einer \u00f6ffentlichen Verwaltung","Uniform Requirements, Heterogeneous Practice: The Potential of Implementing NIS2 in a Public Administration"],"prefix":"10.1365","volume":"63","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1686-9566","authenticated-orcid":false,"given":"Rebecca","family":"Finster","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0270-2666","authenticated-orcid":false,"given":"Linda","family":"Grogorick","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9972-3935","authenticated-orcid":false,"given":"Susanne","family":"Robra-Bissantz","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"93","published-online":{"date-parts":[[2026,2,9]]},"reference":[{"key":"1248_CR1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-658-28408-4","volume-title":"Verwaltung und Verwaltungswissenschaft in Deutschland: Eine Einf\u00fchrung","author":"J Bogumil","year":"2020","unstructured":"Bogumil\u00a0J, Jann\u00a0W (2020) Verwaltung und Verwaltungswissenschaft in Deutschland: Eine Einf\u00fchrung. Springer, Wiesbaden https:\/\/doi.org\/10.1007\/978-3-658-28408-4"},{"key":"1248_CR2","unstructured":"BSI (2021) Leitfaden IS-Revision. https:\/\/www.bsi.bund.de\/DE\/Themen\/Oeffentliche-Verwaltung\/Sicherheitspruefungen\/ISRevision\/Leitfaden\/leitfaden.html?nn=454252. Zugegriffen: 25. M\u00e4rz 2025"},{"key":"1248_CR3","unstructured":"ENISA (2025a) ENISA NIS360 2024: ENISA cybersecurity maturity & criticality assessment of NIS2 sectors. Publications Office. https:\/\/data.europa.eu\/doi\/10.2824\/1378797. Zugegriffen: 17. Dez. 2025"},{"key":"1248_CR4","unstructured":"ENISA (2025b) Technical implementation guidance on Commission Implementing Regulation (EU) 2024\/2690 of 17\u00a0October 2024 laying down rules for the application of NIS2 Directive as regards technical and methodological requirements of cybersecurity risk-management measures: June 2025, version\u00a01.0. Publications Office. https:\/\/data.europa.eu\/doi\/10.2824\/2702548. Gesehen 17. Dez. 2025"},{"key":"1248_CR5","volume-title":"Proceedings der Fachtagung Rechts- und Verwaltungsinformatik (RVI 2025)","author":"R Finster","year":"2025","unstructured":"Finster\u00a0R, Grogorick\u00a0L, Robra-Bissantz\u00a0S (2025) Navigation im Cyberraum: Die NIS2-Umsetzung in der \u00f6ffentlichen Verwaltung \u2013 mit KOMPASS und SEXTANT. In: Proceedings der Fachtagung Rechts- und Verwaltungsinformatik (RVI 2025) Hamburg"},{"key":"1248_CR7","unstructured":"Hausding G (2025) Deutscher Bundestag \u2013 Gesetz zur Informationssicherheit in der Bundesverwaltung beschlossen. https:\/\/www.bundestag.de\/dokumente\/textarchiv\/2025\/kw46-de-nis-2-1123138. Zugegriffen: 17. Dez. 2025"},{"key":"1248_CR8","unstructured":"Hilbricht B (2024) Wer die Frist geschafft hat \u2013 und wer nicht. Tagesspiegel Background Cybersecurity. https:\/\/background.tagesspiegel.de\/it-und-cybersicherheit\/briefing\/wer-die-frist-geschafft-hat-und-wer-nicht. Zugegriffen: 31. Juli 2025"},{"key":"1248_CR9","unstructured":"IT-Planungsrat (2023) Beschluss 2023\/39 \u2013 Umsetzung NIS-2-Richtlinie. https:\/\/www.it-planungsrat.de\/beschluss\/beschluss-2023-39. Zugegriffen: 29. Aug. 2025"},{"key":"1248_CR10","doi-asserted-by":"publisher","DOI":"10.1109\/IEMCON53756.2021.9623161","volume-title":"Public sector digital transformation: challenges for information technology","author":"GM Jonathan","year":"2021","unstructured":"Jonathan\u00a0GM, Hailemariam\u00a0KS, Gebremeskel\u00a0BK, Yalew\u00a0SD (2021) Public sector digital transformation: challenges for information technology. 2021 IEEE 12th\u00a0Annual Information Technology, Electronics and Mobile Communication Conference (IEMCON). https:\/\/doi.org\/10.1109\/IEMCON53756.2021.9623161"},{"issue":"5","key":"1248_CR6","doi-asserted-by":"publisher","first-page":"60","DOI":"10.1108\/01409170310783484","volume":"26","author":"E Patton","year":"2003","unstructured":"Patton\u00a0E, Appelbaum\u00a0SH (2003) The case for case studies in management research. Manag Res News 26(5):60\u201371. https:\/\/doi.org\/10.1108\/01409170310783484","journal-title":"Manag Res News"},{"key":"1248_CR11","volume-title":"Proceedings der Fachtagung Rechts- und Verwaltungsinformatik (RVI 2023)","author":"T Rehbohm","year":"2023","unstructured":"Rehbohm\u00a0T, Moses\u00a0F (2023) Federal cybersecurity architecture and information security management\u2014adoption and diffusion of the NIS. In: Proceedings der Fachtagung Rechts- und Verwaltungsinformatik (RVI 2023) Dresden (2 Requirements)"},{"key":"1248_CR12","doi-asserted-by":"publisher","first-page":"176","DOI":"10.1007\/978-3-031-79007-2_10","volume-title":"Secure IT Systems","author":"E Rehnstam","year":"2025","unstructured":"Rehnstam\u00a0E, Winquist\u00a0W, Hacks\u00a0S (2025) NIS2 directive in Sweden: a\u00a0report on the readiness of Swedish critical infrastructure. In: Horn\u00a0L, Iwaya\u00a0L, Kamm\u00a0L, Martucci\u00a0L, Pulls\u00a0T (Hrsg) Secure IT Systems. Springer, S\u00a0176\u2013195"},{"issue":"1","key":"1248_CR13","doi-asserted-by":"publisher","first-page":"7","DOI":"10.1365\/s40702-018-00489-z","volume":"56","author":"S Robra-Bissantz","year":"2019","unstructured":"Robra-Bissantz\u00a0S, Siemon\u00a0D (2019) Kooperationen in der Digitalen Wirtschaft. HMD 56(1):7\u201321. https:\/\/doi.org\/10.1365\/s40702-018-00489-z","journal-title":"HMD"},{"issue":"5","key":"1248_CR14","doi-asserted-by":"publisher","first-page":"419","DOI":"10.1016\/S0272-6963(02)00022-0","volume":"20","author":"I Stuart","year":"2002","unstructured":"Stuart\u00a0I, McCutcheon\u00a0D, Handfield\u00a0R, McLachlin\u00a0R, Samson\u00a0D (2002) Effective case research in operations management: a\u00a0process perspective. J\u00a0Oper Manag 20(5):419\u2013433. https:\/\/doi.org\/10.1016\/S0272-6963(02)00022-0","journal-title":"J Oper Manag"},{"issue":"3","key":"1248_CR15","doi-asserted-by":"publisher","first-page":"181","DOI":"10.1177\/1468795X17743643","volume":"18","author":"R Swedberg","year":"2018","unstructured":"Swedberg\u00a0R (2018) How to use Max Weber\u2019s ideal type in sociological analysis. J\u00a0Class Sociol 18(3):181\u2013196. https:\/\/doi.org\/10.1177\/1468795X17743643","journal-title":"J Class Sociol"},{"key":"1248_CR16","volume-title":"Case study research and applications: design and methods","author":"RK Yin","year":"2017","unstructured":"Yin\u00a0RK (2017) Case study research and applications: design and methods. SAGE"}],"container-title":["HMD Praxis der Wirtschaftsinformatik"],"original-title":[],"language":"de","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1365\/s40702-026-01248-1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1365\/s40702-026-01248-1","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1365\/s40702-026-01248-1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,6,4]],"date-time":"2026-06-04T06:25:33Z","timestamp":1780554333000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1365\/s40702-026-01248-1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,2,9]]},"references-count":16,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2026,4]]}},"alternative-id":["1248"],"URL":"https:\/\/doi.org\/10.1365\/s40702-026-01248-1","relation":{},"ISSN":["1436-3011","2198-2775"],"issn-type":[{"value":"1436-3011","type":"print"},{"value":"2198-2775","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,2,9]]},"assertion":[{"value":"29 September 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"29 January 2026","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"9 February 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"R.\u00a0Finster, L.\u00a0Grogorick und S.\u00a0Robra-Bissantz geben an, dass kein Interessenkonflikt besteht.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Interessenkonflikt"}}]}}