{"id":55481,"date":"2025-11-17T19:07:43","date_gmt":"2025-11-17T18:07:43","guid":{"rendered":"https:\/\/swissgrc.com\/en\/?p=55481"},"modified":"2026-09-17T15:01:52","modified_gmt":"2026-09-17T13:01:52","slug":"nis2-decision-in-the-bundestag-pressure-on-companies-to-act","status":"publish","type":"post","link":"https:\/\/swissgrc.com\/en\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\/","title":{"rendered":"NIS2 decision in the Bundestag: Pressure on companies to act"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"55481\" class=\"elementor elementor-55481\" data-elementor-settings=\"{&quot;ha_cmc_init_switcher&quot;:&quot;no&quot;}\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-35a9138 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"35a9138\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-73cd8ab\" data-id=\"73cd8ab\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5b9f303 tt elementor-widget elementor-widget-text-editor\" data-id=\"5b9f303\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong><\/strong><\/p>\n<p id=\"ember3780\" class=\"ember-view reader-text-block__paragraph wp-block-paragraph\"><strong>The implementation of the EU NIS2 Directive into German law fundamentally reshapes the cybersecurity requirements for thousands of organizations across the country. Those who act now will not only secure compliance, but also significantly strengthen their overall cyber resilience.<\/strong><\/p>\n<p>With the adoption of the law transposing the NIS2 Directive, the German Bundestag has laid a decisive foundation for the modernisation of the national cybersecurity framework. On 13 November 2025, the so-called Implementation and Cybersecurity Strengthening Act was passed \u2014 a measure that raises security requirements for a vast share of the German economy to an unprecedented level (<a class=\"decorated-link\" href=\"https:\/\/www.bundestag.de\/dokumente\/textarchiv\/2025\/kw46-de-nis-2-1123138?utm_source=chatgpt.com\" target=\"_new\" rel=\"noopener\" data-start=\"1008\" data-end=\"1119\">bundestag.de<\/a>). Not only operators of critical infrastructure are affected; NIS2 expands the scope dramatically and introduces explicit supervisory, reporting, and governance obligations.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-570026f elementor-widget elementor-widget-text-editor\" data-id=\"570026f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Why NIS2 matters<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f8d0b1e elementor-widget elementor-widget-text-editor\" data-id=\"f8d0b1e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-start=\"1316\" data-end=\"1897\">The NIS2 Directive (Directive (EU) 2022\/2555) represents the EU\u2019s primary legal instrument to enhance cybersecurity and cyber resilience. It is a response to an evolving threat landscape characterised by interconnected supply chains, geopolitical tension, and increasingly strategic cybercrime. The Directive demands modern security, governance, and risk management structures \u2014 with clear accountability at senior management level and significant sanctions in the event of non-compliance (<a class=\"decorated-link\" href=\"https:\/\/de.wikipedia.org\/wiki\/NIS-2-Richtlinie?utm_source=chatgpt.com\" target=\"_new\" rel=\"noopener\" data-start=\"1806\" data-end=\"1895\">de.wikipedia.org<\/a>).<\/p>\n<p data-start=\"1899\" data-end=\"2024\">Put simply: cybersecurity is no longer seen as a purely technical issue, but as a central leadership and governance priority.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d252e6f elementor-widget elementor-widget-text-editor\" data-id=\"d252e6f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong><\/strong><\/p>\n<p class=\"wp-block-paragraph\">New legal requirements and why time is short<\/p>\n<p><strong><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-102a066 elementor-widget elementor-widget-text-editor\" data-id=\"102a066\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-start=\"2082\" data-end=\"2201\">With the Bundestag decision, NIS2 is formally integrated into German law. The core elements of the legislation include:<\/p>\n<ul data-start=\"2203\" data-end=\"3319\">\n<li data-start=\"2203\" data-end=\"2534\">\n<p data-start=\"2205\" data-end=\"2534\"><strong data-start=\"2205\" data-end=\"2240\">Significant expansion of scope:<\/strong> An estimated 29,000\u201330,000 companies and public institutions will fall under the regulation \u2014 more than twice as many as before<br data-start=\"2368\" data-end=\"2371\" \/>(<a class=\"decorated-link\" href=\"https:\/\/www.security-insider.de\/bundestag-beschliesst-nis-2-umsetzungsgesetz-a-6b67d5b503bf7404553cc5de4f0dbbb0\/?utm_source=chatgpt.com\" target=\"_new\" rel=\"noopener\" data-start=\"2374\" data-end=\"2532\">security-insider.de<\/a>).<\/p>\n<\/li>\n<li data-start=\"2535\" data-end=\"2793\">\n<p data-start=\"2537\" data-end=\"2793\"><strong data-start=\"2537\" data-end=\"2574\">Tightened reporting requirements:<\/strong> 24-hour early warning notice, 72-hour interim report, and a final report within 30 days<br data-start=\"2662\" data-end=\"2665\" \/>(<a class=\"decorated-link cursor-pointer\" target=\"_new\" rel=\"noopener\" data-start=\"2668\" data-end=\"2791\">csoonline.com<\/a>).<\/p>\n<\/li>\n<li data-start=\"2794\" data-end=\"2916\">\n<p data-start=\"2796\" data-end=\"2916\"><strong data-start=\"2796\" data-end=\"2837\">Stronger supervision and enforcement:<\/strong> The Federal Office for Information Security (BSI) receives expanded authority.<\/p>\n<\/li>\n<li data-start=\"2917\" data-end=\"3165\">\n<p data-start=\"2919\" data-end=\"3165\"><strong data-start=\"2919\" data-end=\"2961\">New \u201cCISO for the Federal Government\u201d:<\/strong> A centralised function to support information security within federal administration<br data-start=\"3046\" data-end=\"3049\" \/>(<a class=\"decorated-link\" href=\"https:\/\/www.bundestag.de\/dokumente\/textarchiv\/2025\/kw46-de-nis-2-1123138?utm_source=chatgpt.com\" target=\"_new\" rel=\"noopener\" data-start=\"3052\" data-end=\"3163\">bundestag.de<\/a>).<\/p>\n<\/li>\n<li data-start=\"3166\" data-end=\"3319\">\n<p data-start=\"3168\" data-end=\"3319\"><strong data-start=\"3168\" data-end=\"3199\">New entity classifications:<\/strong> \u201cImportant\u201d and \u201chighly important\u201d entities \u2014 affecting many organisations previously outside the regulatory perimeter.<\/p>\n<\/li>\n<\/ul>\n<p data-start=\"3321\" data-end=\"3643\">Experts warn that organisations face intense time pressure because the implementation deadline at EU level has already been exceeded<br data-start=\"3453\" data-end=\"3456\" \/>(<a class=\"decorated-link\" href=\"https:\/\/www.becon.de\/bundestag-beschliesst-verspaetetes-nis-2-umsetzungsgesetz-auswirkungen-chancen-und-klare-handlungsempfehlungen-fuer-unternehmen\/?utm_source=chatgpt.com\" target=\"_new\" rel=\"noopener\" data-start=\"3457\" data-end=\"3641\">becon.de<\/a>).<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-214c819 elementor-widget elementor-widget-text-editor\" data-id=\"214c819\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong><\/strong><\/p>\n<p class=\"wp-block-paragraph\">Obligations \u2014 but also opportunities<\/p>\n<p><strong><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-25c2b32 elementor-widget elementor-widget-text-editor\" data-id=\"25c2b32\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-start=\"3691\" data-end=\"3909\">Organisations that view NIS2 as a purely regulatory burden risk missing the strategic benefits. The Directive supports a resilient, holistic security culture and opens opportunities for long-term competitive advantage:<\/p>\n<div class=\"_tableContainer_1rjym_1\">\n<div class=\"group _tableWrapper_1rjym_13 flex w-fit flex-col-reverse\" tabindex=\"-1\">\n<table class=\"w-fit min-w-(--thread-content-width)\" data-start=\"3911\" data-end=\"4454\">\n<thead data-start=\"3911\" data-end=\"3984\">\n<tr data-start=\"3911\" data-end=\"3984\">\n<th style=\"text-align: left;\" data-start=\"3911\" data-end=\"3934\" data-col-size=\"md\">Regulatory challenge<\/th>\n<th style=\"text-align: left;\" data-start=\"3934\" data-end=\"3984\" data-col-size=\"md\">Strategic benefit when implemented effectively<\/th>\n<\/tr>\n<\/thead>\n<tbody data-start=\"3999\" data-end=\"4454\">\n<tr data-start=\"3999\" data-end=\"4092\">\n<td data-start=\"3999\" data-end=\"4038\" data-col-size=\"md\">Reporting &amp; notification obligations<\/td>\n<td data-col-size=\"md\" data-start=\"4038\" data-end=\"4092\">Faster incident response &amp; reduced business impact<\/td>\n<\/tr>\n<tr data-start=\"4093\" data-end=\"4188\">\n<td data-start=\"4093\" data-end=\"4124\" data-col-size=\"md\">Risk management requirements<\/td>\n<td data-col-size=\"md\" data-start=\"4124\" data-end=\"4188\">Structured prioritisation &amp; transparency in security posture<\/td>\n<\/tr>\n<tr data-start=\"4189\" data-end=\"4269\">\n<td data-start=\"4189\" data-end=\"4218\" data-col-size=\"md\">Board-level accountability<\/td>\n<td data-col-size=\"md\" data-start=\"4218\" data-end=\"4269\">Clear ownership &amp; long-term investment security<\/td>\n<\/tr>\n<tr data-start=\"4270\" data-end=\"4342\">\n<td data-start=\"4270\" data-end=\"4294\" data-col-size=\"md\">Supply chain security<\/td>\n<td data-col-size=\"md\" data-start=\"4294\" data-end=\"4342\">Resilience across the entire value ecosystem<\/td>\n<\/tr>\n<tr data-start=\"4343\" data-end=\"4454\">\n<td data-start=\"4343\" data-end=\"4394\" data-col-size=\"md\">Catalogue of technical &amp; organisational measures<\/td>\n<td data-col-size=\"md\" data-start=\"4394\" data-end=\"4454\">Higher cyber defence capacity &amp; reduced operational risk<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<p data-start=\"4456\" data-end=\"4603\">NIS2 demands what many organisations already need: <strong data-start=\"4507\" data-end=\"4603\">integrated cybersecurity, governance, risk and compliance \u2014 not isolated technical controls.<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fc49825 elementor-widget elementor-widget-text-editor\" data-id=\"fc49825\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong><\/strong><\/p>\n<p class=\"wp-block-paragraph\">The path to cyber resilience: beyond compliance<\/p>\n<p><strong><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5520280 elementor-widget elementor-widget-text-editor\" data-id=\"5520280\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-start=\"4662\" data-end=\"4834\">The key challenge is not simply achieving NIS2 conformity, but embedding cybersecurity permanently into processes, organisational structures, and technology. This requires:<\/p>\n<ul data-start=\"4836\" data-end=\"5136\">\n<li data-start=\"4836\" data-end=\"4896\">\n<p data-start=\"4838\" data-end=\"4896\">Visible executive accountability and governance structures<\/p>\n<\/li>\n<li data-start=\"4897\" data-end=\"4973\">\n<p data-start=\"4899\" data-end=\"4973\">Strategic integration of cybersecurity with risk and compliance management<\/p>\n<\/li>\n<li data-start=\"4974\" data-end=\"5027\">\n<p data-start=\"4976\" data-end=\"5027\">Digitalisation and automation of security processes<\/p>\n<\/li>\n<li data-start=\"5028\" data-end=\"5079\">\n<p data-start=\"5030\" data-end=\"5079\">Reportable, audit-ready documentation at any time<\/p>\n<\/li>\n<li data-start=\"5080\" data-end=\"5136\">\n<p data-start=\"5082\" data-end=\"5136\">Continuous monitoring rather than periodic assessments<\/p>\n<\/li>\n<\/ul>\n<p data-start=\"5138\" data-end=\"5310\">Success depends not on the quantity of technical security tools \u2014 but on a <strong data-start=\"5213\" data-end=\"5309\">platform that connects all security, governance, risk, and compliance elements in one system<\/strong>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ca2247a elementor-widget elementor-widget-text-editor\" data-id=\"ca2247a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong><\/strong><\/p>\n<p class=\"wp-block-paragraph\">NIS2 compliance with a system: How Swiss GRC supports organisations<\/p>\n<p><strong><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e8b203d elementor-widget elementor-widget-text-editor\" data-id=\"e8b203d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p data-start=\"5389\" data-end=\"5605\">The implementation of the NIS2 Directive is not just a regulatory development. It is an essential step toward future-proofing organisations in an increasingly hostile cyber landscape. Those who invest early strengthen not only compliance but resilience, competitiveness and ultimately, the security of the wider economy. Swiss GRC enables companies to comply with the EU NIS2 Directive efficiently and without organisational overload, while establishing a foundation for long-term cybersecurity excellence. The <strong data-start=\"5580\" data-end=\"5595\">GRC Toolbox<\/strong> provides:<\/p>\n<ul data-start=\"5607\" data-end=\"5894\">\n<li data-start=\"5607\" data-end=\"5655\">\n<p data-start=\"5609\" data-end=\"5655\">Clear governance and accountability structures<\/p>\n<\/li>\n<li data-start=\"5656\" data-end=\"5719\">\n<p data-start=\"5658\" data-end=\"5719\">Risk assessment and monitoring aligned with NIS2 requirements<\/p>\n<\/li>\n<li data-start=\"5720\" data-end=\"5777\">\n<p data-start=\"5722\" data-end=\"5777\">Incident and reporting workflows with full transparency<\/p>\n<\/li>\n<li data-start=\"5778\" data-end=\"5830\">\n<p data-start=\"5780\" data-end=\"5830\">Continuous compliance evidence and audit-readiness<\/p>\n<\/li>\n<li data-start=\"5831\" data-end=\"5894\">\n<p data-start=\"5833\" data-end=\"5894\">Seamless integration into existing security and IT ecosystems<\/p>\n<\/li>\n<\/ul>\n<p data-start=\"5896\" data-end=\"6003\">In other words: compliance becomes not a hurdle, but a driver of cyber resilience and sustainable security.<\/p>\n<p data-start=\"6005\" data-end=\"6088\">\ud83d\udc49 Learn more:<br data-start=\"6019\" data-end=\"6022\" \/><strong><a href=\"https:\/\/swissgrc.com\/en\/network-information-security-directive-nis2\/\">https:\/\/swissgrc.com\/en\/network-information-security-directive-nis2\/<\/a><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>The NIS2 Directive (Directive (EU) 2022\/2555) represents the EU\u2019s primary legal instrument to enhance cybersecurity and cyber resilience. The implementation of the EU NIS2 Directive into German law fundamentally reshapes the cybersecurity requirements for thousands of organizations across the country. Those who act now will not only secure compliance, but also significantly strengthen their overall cyber resilience.<\/p>\n","protected":false},"author":8,"featured_media":55484,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"_eb_attr":"","_swissgrc_real_author":"Yahya Mohamed Mao","real_author_title":"Chief Marketing Officer","real_author_bio":"Yahya Mohamed Mao is Chief Marketing Officer and Member of the Executive Board at Swiss GRC. In this role, he drives the company's global marketing and communications strategy, shaping brand positioning and market expansion across key regions.","real_author_photo":54996,"footnotes":"","_links_to":"","_links_to_target":""},"categories":[30,66],"tags":[],"class_list":["post-55481","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-industry-news","category-regulation"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"The implementation of the EU NIS2 Directive into German law reshapes the cybersecurity requirements for thousands of organizations across the country.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yahya Mohamed Mao\"\/>\n\t<meta name=\"google-site-verification\" content=\"google-site-verification=BAztS2wKP0jEfbvHt4_mrvvD17WwzZg1w1A6R9uoQRU\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/swissgrc.com\/en\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\/\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_GB\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Swiss GRC | Governance, Risk &amp; Compliance (GRC)\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"NIS2 decision in the Bundestag: Pressure on companies to act\" \/>\n\t\t<meta property=\"og:description\" content=\"The implementation of the EU NIS2 Directive into German law reshapes the cybersecurity requirements for thousands of organizations across the country.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/swissgrc.com\/en\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\/\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2025\/11\/Bundestag-NIS2.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2025\/11\/Bundestag-NIS2.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t\t<meta property=\"og:image:height\" content=\"1080\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2025-11-17T18:07:43+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-09-17T13:01:52+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@SwissGRC\" \/>\n\t\t<meta name=\"twitter:title\" content=\"NIS2 decision in the Bundestag: Pressure on companies to act\" \/>\n\t\t<meta name=\"twitter:description\" content=\"The implementation of the EU NIS2 Directive into German law reshapes the cybersecurity requirements for thousands of organizations across the country.\" \/>\n\t\t<meta name=\"twitter:creator\" content=\"@yibnm\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2025\/11\/Bundestag-NIS2.jpg\" \/>\n\t\t<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t\t<meta name=\"twitter:data1\" content=\"Yahya Mohamed Mao\" \/>\n\t\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"BlogPosting\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\\\/#blogposting\",\"name\":\"NIS2 decision in the Bundestag: Pressure on companies to act\",\"headline\":\"NIS2 decision in the Bundestag: Pressure on companies to act\",\"author\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/author\\\/yahyaen\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2025\\\/11\\\/Bundestag-NIS2.jpg\",\"width\":1920,\"height\":1080,\"caption\":\"The NIS2 Directive (Directive (EU) 2022\\\/2555) represents the EU\\u2019s primary legal instrument to enhance cybersecurity and cyber resilience.\"},\"datePublished\":\"2025-11-17T19:07:43+01:00\",\"dateModified\":\"2026-09-17T15:01:52+02:00\",\"inLanguage\":\"en-GB\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\\\/#webpage\"},\"articleSection\":\"Industry News, Regulation\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/category\\\/industry-news\\\/#listItem\",\"name\":\"Industry News\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/category\\\/industry-news\\\/#listItem\",\"position\":2,\"name\":\"Industry News\",\"item\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/category\\\/industry-news\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\\\/#listItem\",\"name\":\"NIS2 decision in the Bundestag: Pressure on companies to act\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\\\/#listItem\",\"position\":3,\"name\":\"NIS2 decision in the Bundestag: Pressure on companies to act\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/category\\\/industry-news\\\/#listItem\",\"name\":\"Industry News\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#organization\",\"name\":\"Swiss GRC AG\",\"description\":\"Swiss GRC delivers Software Solutions for GRC, CLM &amp; BPM, helping businesses worldwide manage risks, ensure compliance, and drive success.\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/\",\"telephone\":\"+41412207500\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2023\\\/06\\\/Logo_V1_Original_mit_Claim.png\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\\\/#organizationLogo\"},\"sameAs\":[\"https:\\\/\\\/www.twitter.com\\\/SwissGRC\",\"https:\\\/\\\/www.instagram.com\\\/swissgrc\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCy4QuXYekCQrA4n5oEwJSJg\",\"https:\\\/\\\/ch.linkedin.com\\\/company\\\/swissgrc\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/author\\\/yahyaen\\\/#author\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/author\\\/yahyaen\\\/\",\"name\":\"Yahya Mohamed Mao\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\\\/#authorImage\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2026\\\/09\\\/Yahya-1_1-150x150.jpeg\",\"width\":96,\"height\":96,\"caption\":\"Yahya Mohamed Mao\"},\"sameAs\":[\"https:\\\/\\\/twitter.com\\\/yibnm\",\"https:\\\/\\\/ch.linkedin.com\\\/in\\\/yahyamohamedmao\"]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\\\/#webpage\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\\\/\",\"name\":\"NIS2 decision in the Bundestag: Pressure on companies to act\",\"description\":\"The implementation of the EU NIS2 Directive into German law reshapes the cybersecurity requirements for thousands of organizations across the country.\",\"inLanguage\":\"en-GB\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/author\\\/yahyaen\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/author\\\/yahyaen\\\/#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/wp-content\\\/uploads\\\/sites\\\/2\\\/2025\\\/11\\\/Bundestag-NIS2.jpg\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\\\/#mainImage\",\"width\":1920,\"height\":1080,\"caption\":\"The NIS2 Directive (Directive (EU) 2022\\\/2555) represents the EU\\u2019s primary legal instrument to enhance cybersecurity and cyber resilience.\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\\\/#mainImage\"},\"datePublished\":\"2025-11-17T19:07:43+01:00\",\"dateModified\":\"2026-09-17T15:01:52+02:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/\",\"name\":\"Swiss GRC - Software Solutions for GRC, CLM &amp; BPM\",\"description\":\"Governance, Risk & Compliance (GRC)\",\"inLanguage\":\"en-GB\",\"publisher\":{\"@id\":\"https:\\\/\\\/swissgrc.com\\\/en\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>NIS2 decision in the Bundestag: Pressure on companies to act<\/title>\n\n","aioseo_head_json":{"title":"NIS2 decision in the Bundestag: Pressure on companies to act","description":"The implementation of the EU NIS2 Directive into German law reshapes the cybersecurity requirements for thousands of organizations across the country.","canonical_url":"https:\/\/swissgrc.com\/en\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"google-site-verification":"google-site-verification=BAztS2wKP0jEfbvHt4_mrvvD17WwzZg1w1A6R9uoQRU","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"BlogPosting","@id":"https:\/\/swissgrc.com\/en\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\/#blogposting","name":"NIS2 decision in the Bundestag: Pressure on companies to act","headline":"NIS2 decision in the Bundestag: Pressure on companies to act","author":{"@id":"https:\/\/swissgrc.com\/en\/author\/yahyaen\/#author"},"publisher":{"@id":"https:\/\/swissgrc.com\/en\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2025\/11\/Bundestag-NIS2.jpg","width":1920,"height":1080,"caption":"The NIS2 Directive (Directive (EU) 2022\/2555) represents the EU\u2019s primary legal instrument to enhance cybersecurity and cyber resilience."},"datePublished":"2025-11-17T19:07:43+01:00","dateModified":"2026-09-17T15:01:52+02:00","inLanguage":"en-GB","mainEntityOfPage":{"@id":"https:\/\/swissgrc.com\/en\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\/#webpage"},"isPartOf":{"@id":"https:\/\/swissgrc.com\/en\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\/#webpage"},"articleSection":"Industry News, Regulation"},{"@type":"BreadcrumbList","@id":"https:\/\/swissgrc.com\/en\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/#listItem","position":1,"name":"Home","item":"https:\/\/swissgrc.com\/en\/","nextItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/category\/industry-news\/#listItem","name":"Industry News"}},{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/category\/industry-news\/#listItem","position":2,"name":"Industry News","item":"https:\/\/swissgrc.com\/en\/category\/industry-news\/","nextItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\/#listItem","name":"NIS2 decision in the Bundestag: Pressure on companies to act"},"previousItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\/#listItem","position":3,"name":"NIS2 decision in the Bundestag: Pressure on companies to act","previousItem":{"@type":"ListItem","@id":"https:\/\/swissgrc.com\/en\/category\/industry-news\/#listItem","name":"Industry News"}}]},{"@type":"Organization","@id":"https:\/\/swissgrc.com\/en\/#organization","name":"Swiss GRC AG","description":"Swiss GRC delivers Software Solutions for GRC, CLM &amp; BPM, helping businesses worldwide manage risks, ensure compliance, and drive success.","url":"https:\/\/swissgrc.com\/en\/","telephone":"+41412207500","logo":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2023\/06\/Logo_V1_Original_mit_Claim.png","@id":"https:\/\/swissgrc.com\/en\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\/#organizationLogo"},"image":{"@id":"https:\/\/swissgrc.com\/en\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\/#organizationLogo"},"sameAs":["https:\/\/www.twitter.com\/SwissGRC","https:\/\/www.instagram.com\/swissgrc\/","https:\/\/www.youtube.com\/channel\/UCy4QuXYekCQrA4n5oEwJSJg","https:\/\/ch.linkedin.com\/company\/swissgrc"]},{"@type":"Person","@id":"https:\/\/swissgrc.com\/en\/author\/yahyaen\/#author","url":"https:\/\/swissgrc.com\/en\/author\/yahyaen\/","name":"Yahya Mohamed Mao","image":{"@type":"ImageObject","@id":"https:\/\/swissgrc.com\/en\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\/#authorImage","url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2026\/09\/Yahya-1_1-150x150.jpeg","width":96,"height":96,"caption":"Yahya Mohamed Mao"},"sameAs":["https:\/\/twitter.com\/yibnm","https:\/\/ch.linkedin.com\/in\/yahyamohamedmao"]},{"@type":"WebPage","@id":"https:\/\/swissgrc.com\/en\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\/#webpage","url":"https:\/\/swissgrc.com\/en\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\/","name":"NIS2 decision in the Bundestag: Pressure on companies to act","description":"The implementation of the EU NIS2 Directive into German law reshapes the cybersecurity requirements for thousands of organizations across the country.","inLanguage":"en-GB","isPartOf":{"@id":"https:\/\/swissgrc.com\/en\/#website"},"breadcrumb":{"@id":"https:\/\/swissgrc.com\/en\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\/#breadcrumblist"},"author":{"@id":"https:\/\/swissgrc.com\/en\/author\/yahyaen\/#author"},"creator":{"@id":"https:\/\/swissgrc.com\/en\/author\/yahyaen\/#author"},"image":{"@type":"ImageObject","url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2025\/11\/Bundestag-NIS2.jpg","@id":"https:\/\/swissgrc.com\/en\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\/#mainImage","width":1920,"height":1080,"caption":"The NIS2 Directive (Directive (EU) 2022\/2555) represents the EU\u2019s primary legal instrument to enhance cybersecurity and cyber resilience."},"primaryImageOfPage":{"@id":"https:\/\/swissgrc.com\/en\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\/#mainImage"},"datePublished":"2025-11-17T19:07:43+01:00","dateModified":"2026-09-17T15:01:52+02:00"},{"@type":"WebSite","@id":"https:\/\/swissgrc.com\/en\/#website","url":"https:\/\/swissgrc.com\/en\/","name":"Swiss GRC - Software Solutions for GRC, CLM &amp; BPM","description":"Governance, Risk & Compliance (GRC)","inLanguage":"en-GB","publisher":{"@id":"https:\/\/swissgrc.com\/en\/#organization"}}]},"og:locale":"en_GB","og:site_name":"Swiss GRC | Governance, Risk &amp; Compliance (GRC)","og:type":"article","og:title":"NIS2 decision in the Bundestag: Pressure on companies to act","og:description":"The implementation of the EU NIS2 Directive into German law reshapes the cybersecurity requirements for thousands of organizations across the country.","og:url":"https:\/\/swissgrc.com\/en\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\/","og:image":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2025\/11\/Bundestag-NIS2.jpg","og:image:secure_url":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2025\/11\/Bundestag-NIS2.jpg","og:image:width":1920,"og:image:height":1080,"article:published_time":"2025-11-17T18:07:43+00:00","article:modified_time":"2026-09-17T13:01:52+00:00","twitter:card":"summary_large_image","twitter:site":"@SwissGRC","twitter:title":"NIS2 decision in the Bundestag: Pressure on companies to act","twitter:description":"The implementation of the EU NIS2 Directive into German law reshapes the cybersecurity requirements for thousands of organizations across the country.","twitter:creator":"@yibnm","twitter:image":"https:\/\/swissgrc.com\/en\/wp-content\/uploads\/sites\/2\/2025\/11\/Bundestag-NIS2.jpg","twitter:label1":"Written by","twitter:data1":"Yahya Mohamed Mao","twitter:label2":"Est. reading time","twitter:data2":"3 minutes"},"aioseo_meta_data":{"post_id":"55481","title":"NIS2 decision in the Bundestag: Pressure on companies to act","description":"The implementation of the EU NIS2 Directive into German law reshapes the cybersecurity requirements for thousands of organizations across the country.","keywords":null,"keyphrases":{"focus":{"keyphrase":"NIS2","score":87},"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":true,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"BlogPosting","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"seo_analyzer_scan_date":"2026-09-17 13:02:25","breadcrumb_settings":null,"limit_modified_date":false,"open_ai":null,"ai":{"faqs":[],"keyPoints":[],"schemas":[],"titles":[],"descriptions":[],"socialPosts":{"email":{"subject":"","preview":"","content":""},"linkedin":[],"twitter":[],"facebook":[],"instagram":[]}},"created":"2025-11-17 18:00:03","updated":"2026-09-17 13:14:34","focus_keyword":"NIS2","additional_keywords":null,"truseo_locale":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/swissgrc.com\/en\/\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/swissgrc.com\/en\/category\/industry-news\/\" title=\"Industry News\">Industry News<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">\u00bb<\/span><span class=\"aioseo-breadcrumb\">\n\tNIS2 decision in the Bundestag: Pressure on companies to act\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/swissgrc.com\/en\/"},{"label":"Industry News","link":"https:\/\/swissgrc.com\/en\/category\/industry-news\/"},{"label":"NIS2 decision in the Bundestag: Pressure on companies to act","link":"https:\/\/swissgrc.com\/en\/nis2-decision-in-the-bundestag-pressure-on-companies-to-act\/"}],"_links":{"self":[{"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/posts\/55481","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/comments?post=55481"}],"version-history":[{"count":6,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/posts\/55481\/revisions"}],"predecessor-version":[{"id":70082,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/posts\/55481\/revisions\/70082"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/media\/55484"}],"wp:attachment":[{"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/media?parent=55481"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/categories?post=55481"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/swissgrc.com\/en\/wp-json\/wp\/v2\/tags?post=55481"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}