NIS 2 Implementation Act: What manufacturing companies need to know now

14.01.2026

The law implementing the NIS 2 Directive has been in force in Germany since December 6, 2025. It comprehensively modernizes cybersecurity law - with far-reaching consequences for companies in the manufacturing industry.

What does this mean for you?

With the entry into force of the NIS 2 Implementation Act, the group of companies that are legally obliged to strengthen their IT security is expanding. For many SMEs, this means that they must check whether they fall under the new categories of "important" or "particularly important facilities". If so, they will be subject to additional obligations - including registration with the BSI, the introduction of structured risk management and the rapid reporting of significant security incidents. The aim is to increase cyber resilience in Germany and better secure supply chains. For your company, this means that now is the right time to review and adapt processes, systems and responsibilities.

Your most important steps

1. Download our NIS2 white paper!
   You can find the document here:NIS2 Directive: What companies need to know now
2. Check whether you are affected
   Are you an "important" or "particularly important entity"?
   Are you affected in the supply chain?
3. Prepare & complete registration in the BSI portal
4. Strengthen IT security
   - Set up risk management and emergency plans
   - Use certifications such as ISO 27001 or TISAX.
5. Know the reporting channels
   Cyber incidents must be reported quickly in future.

Why act now?

The threat situation in cyberspace is constantly growing - even for small and medium-sized companies. Attacks on production systems, supply chains and sensitive data can not only lead to high financial losses, but can also paralyze business operations. The NIS-2 Implementation Act significantly increases the legal requirements: those who are not prepared risk fines, loss of reputation and operational failures. Early action creates security, reduces risks and strengthens the trust of customers and partners. You can also gain competitive advantages through clear processes and certifications. Now is the right time to set up structures before the new obligations take effect.