In brief: Despite the expired deadline, 10,655 registrations are currently missing at the BSI from companies that fall under the NIS2 Directive.
Following the expiry of the registration deadline for NIS2, the BSI is still missing notifications from 10,655 affected companies. This means that a significant proportion of entities classified as critical or important have so far not completed the mandatory registration.
The deadline for registration with the Federal Office for Information Security (BSI) as part of the NIS2 implementation has passed. According to a report by Börse Express, 10,655 companies that were actually obligated to register are currently missing from the authority’s records. The registration requirement applies to operators of critical infrastructure as well as other entities classified as “important” or “essential” that fall within the scope of the EU directive.
For CISOs, the high number of missing registrations is first and foremost a signal to assess their own position: anyone who has not yet conclusively clarified their company’s classification under NIS2 or has not yet completed the registration should do so immediately. Failure to register can lead to regulatory consequences once the national implementation law is fully in force and fine provisions take effect. In addition, increased review and inquiry activity by the BSI can be expected, as the authority aims to reconcile organizations actually affected with notifications actually submitted.
In practice, it is advisable to promptly review whether one’s own company falls within the scope of NIS2 — for example, based on sector affiliation, employee numbers, and revenue thresholds. Where uncertainty exists, legal advice or a direct inquiry to the BSI should be sought. Companies that are already registered should additionally keep an eye on deadlines for further obligations such as risk management measures and incident reporting requirements, since registration represents only the first step of NIS2 compliance.
Source: news.google.com · Published August 13, 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.8.3.