Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

Germany: BSI publishes guidance on NIS 2

On March 12, 2024, the Federal Office for Information Security (BSI) published guidance on the implementation of the Directive on measures for a high common level of cybersecurity across the Union (the NIS 2 Directive) for the regulated economy. 

The guidance states, among other things, that once the NIS 2 Directive is transposed into national law, the BSI will become the supervisory authority for significantly more companies than before. Therefore, it is expected to lead to a significant increase in the number of companies and institutions that will have to meet registration, proof, and reporting obligations to the BSI. In order to help companies, the BSI provided links to the following guidance:

  • the NIS 2 impact assessment tool for assessing whether a company is likely to be affected by the national implementation of the NIS 2 Directive along with the decision tree which forms the basis for the NIS 2 Directive impact assessment;
  • the NIS 2 frequently asked questions (FAQs) provide a collection of answers about the NIS 2 Directive; and
  • the 'NIS 2 - What to do?' page contains information on what important and particularly important institutions can do now.

You can read the guidance, only available in German, here.