The bottom line: 29,000 German companies must adapt their IT security to NIS2 standards, requiring significant organizational and financial efforts.
The NIS2 Directive forces around 29,000 German companies to adapt their IT security structures. Implementation of EU-wide requirements is causing substantial implementation difficulties for many organizations.
According to current reports, approximately 29,000 German companies must address the new requirements of the NIS2 Directive. With this regulation, the European Union has brought significantly more organizations than before into compliance, requiring them to strengthen their cybersecurity standards and demonstrate compliance in writing.
For CISOs and security managers, this creates a dual challenge: on the one hand, existing security processes must be reviewed and potentially fundamentally redesigned. On the other hand, costs arise from technical investments, personnel training, and compliance management. Particularly medium-sized enterprises report resource allocation bottlenecks.
The deadline for complete implementation remains the responsibility of the member states. Germany is working on implementing regulations to transpose the requirements into national law. Organizations should already begin with a status assessment to avoid delays in the implementation process.
Source: news.google.com · Published 6 July 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.