At a glance: Approximately 30,000 companies must register by 31 July 2024 in accordance with the NIS2 Directive.
The NIS2 Directive requires around 30,000 companies in the German-speaking region to register by 31 July 2024. For CISOs, compliance with this deadline is a compliance milestone for implementing EU cybersecurity requirements.
With 31 July 2024, the registration deadline for the NIS2 Directive (Network and Information Systems Directive 2) expires. Approximately 30,000 companies fall under the definition of critical infrastructures or important digital service providers. The exact sector assignment is based on the sectors defined in the EU Directive, such as energy, water, health, transport, public administration, finance and digital services.
Registration is the first formal step towards full implementation of NIS2 requirements. It serves the responsible authorities in identifying and monitoring regulated entities. In Germany, this task is the responsibility of the Federal Office for Information Security (BSI) and other sector-specific authorities.
For CISOs, the registration deadline represents a critical checkpoint: by then, organisations must have clarified their affiliation to the regulated sector, recorded their contact details and initiated initial compliance measures. Missed registrations can result in fines and reputational damage. The parallel implementation of technical security requirements (risk management, incident reporting) continues within an extended timeframe until October 2024 and mid-2025 respectively.
Source: news.google.com · Published 2 July 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrase and classification through Lumi News Pipeline v1.7.2.