What exactly are NIS and NIS-2?
NIS stands for „Network and Information Security“ and refers to an EU directive to strengthen cybersecurity. NIS was primarily aimed at companies in the so-called critical infrastructure (KRITIS), whereas NIS-2 has significantly expanded this group of affected companies. NIS-2 now requires stricter measures for risk management, incident reporting and supply chain security from around 30,000 companies across Germany.