As the EU’s NIS2 directive takes hold, thousands of German firms face sweeping cybersecurity mandates—and executives face immediate personal accountability.