NIS2 Checker

In December 2022, the EU adopted the Network and Information Security 2.0 Directive (NIS2 Directive). Member States must transpose this Directive into their national cybersecurity laws by 17 October 2024. The aim of the Directive is to establish harmonised standards for IT and cybersecurity in companies.

The Directive sets out very specific risk management measures that companies must implement. It also sets requirements for handling IT incidents. In many cases, regulated entities will additionally be required to register with national authorities. Breaches of the NIS2 requirements may result in fines, and members of the management bodies can be held personally liable. This is one of the key reasons why the Directive places the responsibility of top management squarely in the spotlight.

In Germany, the legislative process is currently in full swing. The planned NIS2 Implementation and Cybersecurity Strengthening Act will fundamentally revise the Federal Office for Information Security Act and supplement it with the requirements of the NIS2 Directive.

The NIS2 Directive will apply to far more companies than is currently the case in Germany under the Federal Office for Information Security Act, for example. Use our NIS2 Checker to obtain a free, straightforward and non-binding assessment of whether your company could be affected.

Disclaimer:

Please note that the NIS2 Checker does not constitute legal advice. It had to be simplified to a certain extent to make it user friendly given the complexity of the legal framework. The NIS2 Checker relies solely on the requirements of the NIS2 Directive and does not take into account the draft versions of the German implementing legislation. The results generated by the NIS2 Checker therefore provide only an initial, non-binding indication of whether the NIS2 Directive may apply. A binding assessment of whether the NIS2 Directive applies to your company requires the entry into an engagement agreement with us. For information on which personal data is processed in connection with the NIS2 Checker, and to what extent, please refer to our privacy policy.