Implementation of the NIS2 Directive

With advancing digitalization and the simultaneous rise in cybercrime, cybersecurity is becoming increasingly important. The European NIS2 Directive establishes uniform minimum standards for cybersecurity and has now been transposed into German national law through the BSI Act.

Due to the significantly expanded scope of application, numerous companies that were previously unaffected are now required to address the legal requirements for information security. Take our free NIS2 impact assessment now.

Our consulting services: We support you in implementing the NIS2 directive.

Our services

Clarification of the impact of NIS2

Conducting a compliance audit to identify areas where legal action is required.

Establishment of measures

Conducting a risk analysis to develop the priorities of your information security system

Support in implementing the necessary technical and organizational measures

Your benefits

Legal certainty in accordance with the NIS2 directive and the BSI Act.

Identification of deficiencies and determination of corrective measures

Establishing a comprehensive risk management system

Long-term compliance with NIS2 requirements

Reducing vulnerability to cybercrime

Who is affected by the NIS2 Implementation Act?

The NIS2 directive significantly expands the existing scope and will now also cover companies considered systemically important due to their significance for society, the economy, or specific sectors. A distinction is made between "particularly important" and "important establishments." Furthermore, medium-sized companies with more than 50 employees can now fall under its scope. According to estimates by the Federal Office for Information Security (BSI), this will subject approximately 29.000 companies in Germany to new obligations.

What action is needed now?

Key obligations include registration with the relevant authority, reporting requirements, and the implementation of a comprehensive risk management system. This encompasses, among other things, crisis management, supply chain security, security requirements for IT procurement and maintenance, employee training, personnel security, and secure communication channels.

Companies should promptly assess whether they are affected and conduct a risk analysis, as well as develop a concrete implementation plan. Regular audits help ensure long-term compliance with NIS2 requirements.

Contact

Florian Goetz
Munich office
Phone: +49 0 89 1210 9940
Email: Florian.Goetz@arqum.de

Florian Götz is a consultant and Chief Information Security Officer (ISO/CISO) specializing in compliance in the areas of information security, data protection, environment, energy, and occupational safety. He supports organizations in conducting compliance audits, creating and maintaining legal registers, and implementing NIS2 requirements.

What can we do for you?

References

customer projects

Climate protection

Development of a greenhouse gas reduction strategy for AOK Bayern

Environmental management

Conducting the annual environmental audit according to EMAS as well as conducting compliance audits.

International cooperation

Conducting online training courses on water and wastewater management for companies in Azerbaijan in cooperation with the German-Azerbaijani Chamber of Commerce, in order to raise awareness of the sustainable use of the resource water and to be able to implement effective measures for resource conservation.