New IT Security Requirements For The Energy Sector

At the end of 2022, the EU has adopted important regulations to protect network and information security in "critical sectors" with the "NIS2" directive. The energy sector is also classified as a "critical sector". Thus, the protection of certain facilities and services against cyber threats is to be strengthened. In Germany, the directive is implemented by the NIS 2 Implementation and Cybersecurity Strengthening Act (German). In doing so, the draft law goes beyond the EU requirements and thus brings about numerous innovations in national cyber security law.

The NIS 2 Implementation and Cybersecurity Strengthening Act is to be adopted by mid-2024. The obligations it entails are to apply from 1 October 2024.