Start of registration with the supervisory authority for Germany’s NIS2 implementation act
In Germany, the NIS2 Implementation Act, which transposes the NIS2 Directive into national law, entered into force on December 6th 2025. As a result, companies that fall within the scope of the Directive are required to register by March 6th 2026 via the portal of the competent supervisory authority, the BSI (Federal Office for Information Security).
Note that the registration may take around three weeks, including the preparation of the required information and documentation.
Companies that fail to register by the deadline may face fines of up to €500,000.
We recommend starting early rather than relying on last-minute solutions.
Registration guide
1. Obtain an ELSTER certificate issued by the tax office (Issuance takes around 2 weeks)
https://www.elster.de/eportal/unternehmerorientiert/registrierungsprozess
2. Create a “My Business Account (MUK account)” in the BSI portal
3. Authenticate using ELSTER
4. Enter the required information in the registration form in the BSI portal
5. Review your entries and complete the registration
As part of our CSIRT service, we offer technical consulting, support in building an ISMS, and incident response within 12 hours, as well as a detailed guide for registering in the BSI portal and hands-on assistance with the registration via screen sharing in a video conference.
If you need support with BSI registration or NIS2-compliance, please do not hesitate to contact us.
