BSI Security Congress: Low NIS-2 Implementation Levels (heise.de)

• Critical shortfall in corporate registration compliance
• NIS-2 perceived as burden rather than strategic security
• Systemic risks to national critical infrastructure

"The 21st BSI Security Congress highlights a critical gap in the adoption of the NIS-2 directive among German businesses. Many entities remain unaware of or indifferent to mandatory registration requirements. This lack of compliance poses a significant threat to the cybersecurity posture of critical infrastructure. Industry observers note that the directive is currently treated as an administrative nuisance rather than a foundational security mandate, leaving organizations vulnerable to both cyber attacks and pending regulatory penalties."