Implementation of an early warning and crisis management system in accordance with Section 1 StaRUG in conjunction with IDW S 16

Nikita Gontschar
2 days ago
6 min read

Since November 2025, it's been here: IDW S 16, the first concrete standard for designing early crisis detection and crisis management according to Section 1 of the German Act on the Stabilization and Restructuring Framework for Businesses (StaRUG). Sounds like a topic for auditors? It isn't. It's a topic for every managing director of a limited liability company in Germany—personally.

What is this all about?

Section 1 of the StaRUG (Act on the Stabilisation of Businesses in the Public Sector) has been in force since January 1, 2021. The provision is short, almost inconspicuous — and it has simply gone unnoticed in many management offices.

She demands three things from management:

to continuously monitor developments that could jeopardize the company's continued existence,
to take appropriate countermeasures in the event of an impending crisis,
to inform the relevant supervisory bodies without delay.

Sounds like common sense. Legally, however, it's a serious threat. Anyone who fails to comply is personally liable—internally under Section 43 of the German Limited Liability Companies Act (GmbHG), and externally to creditors in conjunction with Sections 15a and 15b of the German Insolvency Code (InsO). And in case of doubt, it's not the management's "gut feeling" that counts in court, but what's documented in writing. For four years, it was unclear how this obligation was to be fulfilled in practice. That uncertainty has now been resolved.

The IDW S 16 — the new standard

On September 8, 2025, the IDW's (Institute of Public Auditors in Germany) Restructuring and Insolvency Committee adopted S 16 final, followed by its acknowledgment by the Main Committee on September 26. The standard was published in IDW Life 11/2025. This provides, for the first time, a concrete reference framework that auditors, courts, and, not least, D&O insurers will use as a guide. The IDW's core message can be summarized in one sentence: The requirements of Section 1 of the German Act on the Stabilization and Restructuring Framework for Businesses (StaRUG) can be met with appropriate business planning and a suitable planning process—and this explicitly applies to medium-sized businesses and smaller limited liability companies as well. In other words: No one has to produce a 200-page compliance file. But every managing director must be able to demonstrate that they have a system in place. And one that works.

What an early warning system according to IDW S 16 must contain

The standard requires six building blocks — scalable according to the size and complexity of the company:

Integrated business planning. Profit and loss, balance sheet, and liquidity planning, internally consistent, with a horizon of typically 24 months. This is the core element. Without this planning, there is no IDW S 16 compliance; without IDW S 16, there is no StaRUG-compliant system.
A risk inventory with risk aggregation. Not just a list of the "usual suspects," but a systematic assessment of probability of occurrence, severity of damage, and—crucially—combined effects. A single risk may be tolerable. Three medium-sized risks occurring simultaneously often are not.
Early warning indicators with clear thresholds. At what liquidity reserve does the alarm bell ring? At what sales slump? When is the equity ratio critical? These thresholds must be linked to the grounds for insolvency proceedings under Sections 17, 18, and 19 of the German Insolvency Code (InsO) — impending insolvency, insolvency, and over-indebtedness.
An escalation and reporting matrix. Who reports what, to whom, in what form, and most importantly: by when? Reports between managing directors, to the shareholders' meeting, and to any advisory board. Clear channels, clear deadlines.
A crisis management process. What happens after a threshold is crossed? Which measures come first? Who is responsible? What deadlines apply? A system that recognizes crises but doesn't provide instructions for action is only half a system.
Documentation and periodic effectiveness reviews. Deliberately conducted in accordance with the principle of materiality—that is, appropriately streamlined, but comprehensive. In the event of a dispute, the documentation is the only exonerating evidence a managing director can present.

Those who need to be especially careful

In principle, Section 1 of the StaRUG (Act on the Stabilization and Restructuring Framework for Businesses) applies to every limited liability company. Whether a GmbH (limited liability company) with five or five hundred employees, a young tech company or an established medium-sized enterprise, whether owner-managed or fund-financed – the obligation applies to all. IDW S 16 (German Institute of Public Auditors Standard 16) explicitly emphasizes that the system is scalable and also includes smaller companies. There is no "too small for StaRUG" threshold.

However, we see this issue as particularly urgent in three situations, because in addition to the legal obligation, there are additional risks involved:

Interim Managing Director after a Company Sale . A very common scenario in M&A practice: The previous shareholder-managing director has sold their shares and remains on board as managing director—often at the buyer's request, sometimes contractually agreed for 12 to 36 months. Overnight, the owner has become an employed external managing director. What was previously "their own company" is now the company of others—with all the formal obligations to the new shareholders, whose expectations regarding reporting, risk transparency, and documentation are often significantly higher than those of the old ownership structure. Section 1 of the German Act on the Stabilization and Restructuring Framework for Businesses (StaRUG) in conjunction with IDW Standard 16 is not only mandatory in this phase, but also the instrument with which the interim managing director demonstrates that they are managing the company according to professional standards—and simultaneously protects themselves from accusations that can arise very quickly in the event of a conflict.

Shareholder dispute looming . In any situation where the relationship between shareholders and management could become strained—family businesses with diverging interests, joint ventures with differing strategies, investments with earn-out components—a documented early warning system is a form of life insurance. Those who have nothing to show for it often lose the dispute before it even begins.

Regulated sectors with existing compliance structures : Banks and financial service providers, insurance brokers, securities firms, payment service providers, energy suppliers, regulated healthcare providers, companies with BAFA or KRITIS (critical infrastructure) ties, and companies regulated under the Trade Regulation Act (GewO) – all are subject to sector-specific professional, supervisory, and documentation obligations that are regularly audited. A common misconception is: "We're already heavily regulated; that covers it." It doesn't. These structures cover investor, consumer, or supply protection – i.e., the protection of third parties from the company – but not the company's own risk. IDW S 16 closes precisely this gap. The good news: Those who already have a compliance culture can build upon it methodically instead of creating a new one – risk inventories, control routines, and reporting channels can often be expanded to include the StaRUG (Stamm- und Wirtschaftsregulations Act) dimension with manageable effort.

In all other cases —that is, for a typical limited liability company (GmbH) without any particular pressure—the obligation still exists. It just feels less urgent. Experience shows that the need to catch up arises precisely at the most inconvenient moment: during the next financing round, at a sale, at the first uncomfortable shareholders' meeting, or when renewing the D&O insurance. Those who start early have an easier, cheaper, and less stressful time.

What CEOs should do now

Three steps, in this order:

Inventory. What do we already have? Liquidity planning? Reporting? Risk workshops? Rules of procedure with reporting obligations? Much of it is often in place, but unconnected.
Gap analysis against IDW S 16. Where are the gaps? What is missing formally, what is missing in terms of content?
Implementation within a clearly defined project. Eight to ten weeks is realistic for a medium-sized company. Those who start implementation in the summer will be fully operational by the end of the year.

What managing directors shouldn't do: wait until their tax advisor or D&O insurance company brings up the issue. By then it's usually too late, and their negotiating position is weaker.

Do you want to set up your early warning system?

We support managing directors and shareholders of medium-sized companies in the introduction of early crisis detection and crisis management systems in accordance with Section 1 StaRUG in conjunction with IDW S 16.

What sets us apart:

Expertise at the interface between insolvency and corporate law. Our lawyers hold doctorates at the intersection of insolvency and corporate law. This very interface shapes Section 1 of the StaRUG (Act on the Stabilization and Restructuring Framework for Businesses), Sections 17–19 of the Insolvency Code (InsO), and Section 43 of the Limited Liability Companies Act (GmbHG) – the set of obligations that the system must safeguard.
Experience with compliance systems. We have implemented compliance and governance systems for medium-sized clients in the past. Methodological templates—risk inventory, escalation logic, audit-proof documentation—are already in place and do not need to be developed for you.
Efficiency through client proximity. Where we already know clients from ongoing consulting or transactions, the onboarding overhead is eliminated. This is directly reflected in the fees.
A well-established interface between auditors and tax advisors. The plausibility check of the integrated plan runs smoothly via established cooperation partners — no searching, no friction.
International client experience. We advise companies from the USA, UK, Luxembourg, Switzerland, the Middle East, Asia and Latin America — cross-border corporate structures are also part of our daily business.

Do you have any questions or would you like to arrange a kick-off meeting?

Write to us at mail@gxglegal.com