June 2024
The law to implement the NIS-2 Directive, which seeks to strengthen cyber security (NIS-2 Implementation and Cyber Security Strengthening Act), is currently being discussed by government bodies and associations. NIS stands for "Network and Information Security". The aim is to incorporate the EU-wide minimum standards for cyber security of NIS-2 into national regulation. This will affect at least 30,000 companies in Germany. As of June 2024, the law is available as a draft bill; it must have passed through the legislative process at a federal level by October 2024.
To comprehensively protect critical infrastructures and other economic sectors, the law will significantly tighten existing requirements. They will affect more companies in the future, as the law will apply to medium-sized companies with at least 50 employees or a turnover of €10 million in certain sectors. In addition, there will also be new indirect requirements for suppliers, including IT service providers, for example.
The companies covered by the directive will also have to deal more intensively with the management of cyber risks, the control and monitoring of incidents and the maintenance of their business activities. Robust cyber security and corresponding emergency plans will therefore become a fundamental part of business activities. This is also necessary, not least due to the increased number of cyber-attacks on companies and administrations in recent years.
Cyber security at Content5
We at Content5 share these concerns: although we will not be directly regulated in this regard due to the size of our company, we are entirely aware of the importance of the issue. We have therefore placed the topic of cyber security high on our internal agenda and have introduced various methods and targeted certifications. This is happening both internally and externally.
Cyber security, especially in light of the increasing spread of artificial intelligence, will be of increasing concern to us all in the coming period. At Content5, we are preparing for this and are implementing measures every day to strengthen cyber security within our company.
