DE EN

Industry and Regulation

Companies within the scope of the NIS 2 Directive

Companies in those sectors that have been subject to stricter information security obligations since December 2025, with indications of their size.

The occasion

With the transposition of the European NIS 2 Directive, tens of thousands of companies in Germany are obliged to organise their information security demonstrably, to register with the Federal Office and to report incidents. Management is personally liable for implementation. A considerable proportion of the companies concerned has yet to meet this obligation.

Who works with this list

  • Information security firms
  • Consultants for information security management systems
  • Cyber insurers
  • Training providers for management boards

What each row contains

Company Legal form Street Postcode City Federal state Industry Register court Register number Incorporated Share capital Management Website Telephone Group affiliation Distance (km)

Further themes in this field.

Wind and biogas plants at the end of their feed in tariff Operating companies of wind, biogas and solar installations from the period whose statutory guaranteed tariff is now expiring. 2,551 companies Healthcare providers Medical care centres, hospitals, care facilities and practice companies, optionally limited to those in group structures or with a management ahead of a handover. 19,287 companies