In a nutshell: Only 61 percent of companies obliged to register have signed up under the IT Security Act; unregistered businesses face significant compliance risks.
Only around 61 percent of companies obliged to register have so far registered in accordance with the IT Security Act. Of an estimated 30,000 businesses, just 18,500 have completed registration.
Based on available data on registration under the IT Security Act, a significant gap is emerging between obligation and implementation: 18,500 companies have registered, while the total number of registered companies is estimated at around 30,000. This means that nearly 39 percent of businesses have so far failed to register.
For CISOs and compliance officers, this rate has immediate consequences. The IT Security Act requires companies above a certain size to register with the responsible authority and comply with specific security standards. Those not registered in time risk sanctions and lose legal certainty.
The rate suggests that information gaps, administrative burden, or unclear requirements regarding the exact obligations have led to delays at many businesses. CISOs should verify whether their company is subject to the registration requirement and, if not yet registered, immediately initiate the required steps.
Source: news.google.com · Published 2 July 2026
Lumi AI News — AI-assisted curation in accordance with Art. 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.2.