In a nutshell: 11,500 German organizations from critical infrastructures are now subject to enhanced cybersecurity supervision under NIS2.
The Federal Office for Information Security (BSI) has registered 11,500 critical entities under the NIS2 Directive. This figure demonstrates the scope of the new European cybersecurity regulation in Germany.
In accordance with the European NIS2 Directive (Network and Information Systems Security Directive), the BSI has identified and registered 11,500 critical entities. These fall under the extended security requirements of the regulation that applies from January 2025 onwards.
The registered organizations come from sectors such as energy, water, transport, health, finance and public administration. They must now implement and maintain cybersecurity measures according to European standards, including regular security audits and incident reporting to the BSI.
For compliance officers, this means that their organizations, if classified as critical, must meet concrete technical and organizational requirements. The BSI provides guidance and tools for implementation. Registration serves as proof of BSI registration and forms the basis for compliance reviews.
Source: news.google.com · Published June 3, 2026
Lumi AI News — AI-assisted curation in accordance with Article 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.6.2.