Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
Germany: BSI publishes guidance on NIS 2
On March 12, 2024, the Federal Office for Information Security (BSI) published guidance on the implementation of the Directive on measures for a high common level of cybersecurity across the Union (the NIS 2 Directive) for the regulated economy.
The guidance states, among other things, that once the NIS 2 Directive is transposed into national law, the BSI will become the supervisory authority for significantly more companies than before. Therefore, it is expected to lead to a significant increase in the number of companies and institutions that will have to meet registration, proof, and reporting obligations to the BSI. In order to help companies, the BSI provided links to the following guidance:
- the NIS 2 impact assessment tool for assessing whether a company is likely to be affected by the national implementation of the NIS 2 Directive along with the decision tree which forms the basis for the NIS 2 Directive impact assessment;
- the NIS 2 frequently asked questions (FAQs) provide a collection of answers about the NIS 2 Directive; and
- the 'NIS 2 - What to do?' page contains information on what important and particularly important institutions can do now.
You can read the guidance, only available in German, here.