Die Resilienz als neue Anforderung des Rechts der Daten- und IT-Sicherheit

Resilience as a new requirement of data security law according to Art. 32 GDPR (there in german: "Belastbarkeit") is much more important than it seems at first glance: in addition to the proven handling of insecurity (risk), resilience addresses the uncertainty that inevitably remains with any risk management. Additional resilience measures must therefore arm the socio-technical system against all events that cannot be recognised and treated as risks. Such uncertain events are caused by increasingly complex systems or the growing use of AI, for example. Resilience offers an answer to this, not only for data security, but also for IT security in accordance with the new BSIG.