The NIS 2 Act has been in force since 6 December 2025. Its aim is to establish a high and binding level of cybersecurity across Europe. For companies – and executive management in particular – this means greater responsibility, clearly defined obligations and significantly higher requirements for governance, risk management and security measures. When implemented correctly, NIS 2 becomes a powerful tool for sustainable cyber security. Work with us to implement the legal requirements efficiently, pragmatically and appropriately. Who is affected?
Find out more!The NIS 2 Act applies to a wide range of companies across the European Union. If the required information security requirements are not met, the management of the companies and organizations concerned may be held liable. In Germany, the NIS 2 Implementation Act (NIS2UmsuCG) entered into force on December 6th, 2025.
But be careful: Smaller companies may also be subject to the requirements if a disruption to their operations could have an impact on public order, pose systemic risks or have cross-border effects.
NIS 2 aims to harmonize and strengthen the level of cybersecurity across EU Member States. Its stricter requirements are designed to enhance the resilience of critical infrastructure and digital services throughout the European Union.
Efficient and responsive
Targeted and tried and tested
integrated and everything from a single source
Customised and solution-oriented
in partnership and sustainable
The NIS2 Directive demands much more from organizations than just basic IT security. It calls for a systematic, risk-based approach to strengthening cybersecurity—technically, organizationally, and strategically. This includes effective incident response and business continuity planning, awareness training and employee education, clear reporting procedures for security incidents, secure system architectures, identity and access management, and measures to safeguard the supply chain.
In short: Organizations must elevate their digital resilience—regardless of whether national legislation is already in force. Our consulting services fully cover these requirements.
Explore our NIS 2 consulting services to see how we can support you with targeted solutions.
We identify weaknesses in your IT security and create a comparison with the German NIS 2 Implementation Act. You receive an overview of the areas of your company where adjustments are required.
Based on the findings of the GAP analysis, we develop customised solutions, support you in closing gaps and ensure compliance with the NIS 2 requirements. On request, we can also take over tasks completely.
According to the NIS 2 Act organisations continuously have to be up to date with their technology. We support you with the implementation and organise regular training courses to ensure that your employees' knowledge is always up to date.
find out more

Tino Müller
Expert NIS-2-Implementation

Tino Müller
Expert NIS-2-Implementation