BSI & TÜV: Worrying Survey on Cybersecurity Among German Companies

The German BSI (Federal Office for Information Security) and TÜV-Verband conducted a survey among German companies to assess the status of cybersecurity in the private sector.

Some worrying results from my point of view are:

• 50% of the companies do not know the NIS2 directive
  (note: the survey does not specify the number of companies in the sample which would be affected by NIS2 directly or indirectly)
• While 10% of companies report attacks via their supply chain, only 32% of the companies issue cybersecurity requirements towards their suppliers.
• 27% of the companies report, that cybersecurity plays little or no role for them
• 90% of the companies consider their cybersecurity as “rather good / very good”, while the BSI president draws a much more pessimistic picture

🌐 Link to the study:
BSI – Presse – TÜV-Studie zur Cybersicherheit der deutschen Wirtschaft: Bedrohungslage steigt, Unternehmen wiegen sich in trügerischer Sicherheit

🌐 Press conference with BSI and TÜV:
Cybersecurity: Studie zur digitalen Sicherheit der deutschen Wirtschaft | 11.06.25 – YouTube