NIS-2 Implementation Act: Cybersecurity Duties for 30,000 German Companies
Validated facts
The NIS-2-UmsuCG implements the EU directive into German law. Around 30,000 businesses (important and especially important entities) must take strict risk measures and report incidents to the BSI within 24 hours.
In plain language
Digital fire protection: Every mid-sized company must now show smoke detectors, extinguishers, and an emergency plan for cyberattacks.
Security relevance & practical tip
Increases the resilience of critical supply chains (including suppliers, logistics providers, and municipal utilities).
Primary source / reference
- NIS-2-UmsuCG / BSI-Gesetz neu