What the act provides
The management body approves the cybersecurity measures [3]. Every member of the management body has knowledge and skills about cyber risks, demonstrably keeps them up to date and holds a certificate of a training [4]. Article 24 applies that per legal form:
- maatschap: every partner, for the approval and for the knowledge and certificate requirements [1]
- vennootschap onder firma (vof): every partner [1]
- commanditaire vennootschap (cv): the managing partners, not the silent partners [1]
- legal person as director: the natural persons who sit on the management body on its behalf, for the knowledge and certificate requirements [5]
With a one-tier board
If a bv or nv (private or public limited company) has a board with executive and non-executive directors, the duties apply only to the executive directors [2].