The German Federal Office for Information Security (BSI) has announced an enforcement initiative to implement the German IT Security Act (BSIG), which transposes the NIS 2 Directive.
Current figures for Q3\/2026 show that 20,373 companies have registered with the BSI portal so far (including registrations of branch offices and cross-border entities). However, the BSI estimates that approximately 30,000 companies are actually affected. This leaves a significant gap, roughly one in three to one in four affected companies has yet to register.<\/p>\n\n\n\n
The BSI now intends to identify these companies and initiate hearings to clarify why they failed to register. Depending on the individual case, fines may be imposed in this process. Enforcement will begin with entities where it is obvious that they should have registered.<\/p>\n\n\n\n
What this means for your company: If you have not yet done so, you should immediately conduct a documented applicability assessment to protect yourself from fines. If you need support with this, please feel free to reach out to us.<\/p>\n\n\n\n
For early 2027, the BSI also plans to target selected companies, obliging them to have their IT security audited and to submit corresponding evidence. The BSI will decide which companies are affected based on a risk-oriented approach. This means for your company to keep your security documentation readily available and ensure that you can demonstrate at any time which protective measures you have implemented.<\/p>\n\n\n\n
Take action now and protect yourself from attackers and prepare for potential examinations by the BSI. We are happy to support you with our consulting services and will work with you to create a roadmap for implementing the NIS 2 requirements in your company as quickly and efficiently as possible.<\/p>\n","protected":false},"excerpt":{"rendered":"
The German Federal Office for Information Security (BSI) has announced an enforcement initiative to implement the German IT Security Act (BSIG), which<\/p>\n