The German government has approved a new law aimed at bolstering cybersecurity measures across the nation. The cabinet on Wednesday gave the green light for the draft legislation spearheaded by Interior Minister Alexander Dobrindt (CSU), designed to reinforce digital infrastructure protection.
This legislation implements the second EU Network and Information Security (NIS-2) Directive into German law. It mandates a more active role for a significantly broader range of businesses in safeguarding their digital assets, spanning key sectors of the national economy. Enhanced cybersecurity for government agencies is also a core component.
The Federal Office for Information Security (BSI) will be equipped with expanded oversight tools to provide targeted support for businesses and to monitor adherence to established security standards. This includes the ability to proactively guide organizations and ensure compliance.
“This new law establishes a substantially higher level of security for our economy and administration” stated Dobrindt. “Businesses and authorities will become more resilient to cyberattacks, achieved through clear guidelines without unnecessary bureaucratic processes.
Alongside this digital security initiative, the Interior Ministry is also pursuing a so-called KRITIS (Critical Infrastructure) framework law. This forthcoming law aims to establish industry-wide minimum standards for the physical protection of critical infrastructure assets.
