1. Update of draft BSIG: status and development of NIS-2
implementation in Germany
Last year, we reported several times on the planned
transposition of the NIS-2 Directive (EU) 2022/2555 into German law
(see Newsletters of 18 December 2024 and 26 March 2024). The aim of
the NIS 2 Directive is to create uniform minimum standards for
cybersecurity across Europe. This should ensure a higher level of
protection for critical infrastructures, essential and important
entities.
However, its implementation in Germany failed due to the end of
the so-called "traffic light" coalition (see Newsletter
dated 18 December 2024).
Current implementation status
After remaining "quiet" for several months, the
implementation project is now back on track. A few weeks ago, an
unofficial draft bill of the implementation law (German Act on the
Federal Office for Information Security, Gesetz über das
Bundesamt für Sicherheit in der Informationstechnik,
BSIG:"BSIG-E") became
