NIS-2 implementation with DAKS^®

The abbreviation NIS stands for “Network and Information Security.” NIS-2 is the European extension of the international directive for the protection of critical infrastructure (KRITIS) against IT incidents and cyberattacks from 2023.

More and more companies and organizations, including smaller firms, e.g., in the energy and healthcare sectors, as well as their service providers, are affected by the directive, depending on their classification as “critical infrastructure” (KRITIS) in accordance with Section 2 (10) BSIG ("BSI-Kritisverordnung").

The German Federal Office for Information Security (BSI) estimates that approximately 30,000 companies in Germany will be affected. These include in particular:

• Medical care facilities: university hospitals, general hospitals, specialist and private clinics, medical practices, laboratories, and other medical facilities
• Public administration institutions at federal, state, and local level
• Government institutions such as police, defense, justice, disaster control, emergency and rescue services
• Utilities for energy generation and distribution and water management
• Transportation and traffic institutions: road traffic, aviation, rail transport, and shipping

Other KRITIS-relevant organizations may also be affected. Examples:

• Manufacturing: Companies in the food industry, agriculture, and fishing
• Trade sector: Companies in the food trade and logistics
• Facilities in the waste disposal industry, such as municipal waste disposal
• Facilities for the protection of cultural assets worthy of preservation, such as museums, libraries, archives, and cultural monuments
• Media and culture sector: Broadcasting, television, and press facilities
• Institutions in the financial and insurance sectors
• Companies in information technology and telecommunications, such as data centers

Since October 18, 2024, affected organizations have been subject to strict reporting requirements and corresponding security measures, with non-compliance punishable by heavy fines.