Today, the German Bundestag’s Committee on Internal Affairs and Community is dealing with the outstanding issues regarding the implementation of the NIS2 Directive, whose deadline for national transposition already expired on 17 October 2024. eco – Association of the Internet Industry is urging for a swift adoption of the law in order to provide legal clarity for the approximately 30,000 affected companies.
Klaus Landefeld, Member of the eco Board, states: “The German federal government must now act quickly and transpose the NIS2 Directive in Germany. The already expired deadline for implementation creates uncertainty for internationally active companies.”
A central aspect of the NIS2 Directive is the transfer of cybersecurity responsibilities to the management level of companies. Landefeld emphasises: “This step is of great importance, as cybersecurity is no longer seen as a purely technical task. Rather, it has become a strategic challenge that affects the entire management of the company. The legal regulation should be seen as an opportunity for companies to strengthen their security culture in a sustainable manner.”
Another critical point, which is also to be addressed in the upcoming hearing, is IT risk management. “The pressing questions in this regard are crucial for practical implementation. As long as the NIS2 Directive is not transposed, the security of critical infrastructure remains at risk. It is essential that companies prepare themselves now to meet the new requirements.”
