Key point: 39 percent of mid-market companies have registered for NIS2 compliance so far, with the majority still outstanding.
Just under two-fifths of German mid-market companies have registered for NIS2 compliance, according to current figures. This suggests that the majority of affected companies have yet to meet their reporting obligations.
According to available data, 39 percent of mid-market companies falling under the NIS2 Directive have completed registration. This figure is significantly lower than hoped and means that approximately 61 percent of affected companies have not yet completed their registration.
For CISOs and IT security officers, this rate is relevant as it indicates the pressure to act both within the organization and across the industry landscape. The NIS2 Directive sets binding requirements for network and information security, particularly for critical infrastructure and their suppliers. A lack of registration often indicates insufficient preparation for compliance requirements.
The registration deadline is still running in many federal states; however, companies should act promptly to avoid penalties or regulatory measures. Meeting the reporting obligation is a cornerstone of NIS2 implementation and is often a prerequisite for access to public procurement contracts.
Source: news.google.com · Published 12 July 2026
Lumi AI News — AI-assisted curation in accordance with Article 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.