Kaspersky registered with German Federal Office for Information Security (BSI) in accordance with NIS 2 Directive

Kaspersky Labs GmbH has registered under the EU NIS 2 Directive as an “essential entity” in accordance with the German law implementing the directive.

The registration with the German Federal Office for Information Security (BSI) is valid for the entire European Union.

Kaspersky actively contributed to the legislative process related to the NIS 2 Directive and has been proactively implementing key measures that are now included in the obligations set out in the directive for years.

The NIS 2 Directive establishes a single framework at EU level to strengthen cybersecurity in 18 critical sectors.

It requires Member States to develop national cybersecurity strategies, while enhancing cross-border cooperation with EU institutions to respond to incidents more quickly and enforce regulations more effectively.

The obligation to register under the NIS 2 Directive applies to medium and large enterprises, which as a rule have at least 50 employees or an annual turnover of at least EUR 10 million, and operate in critical sectors such as energy, transport, banking, healthcare, digital infrastructure, manufacturing, ICT service management and other areas.

Kaspersky has been actively involved in the development of the NIS 2 Directive since 2020, both at the European Union level and in the Member States.

The company has contributed by sharing its knowledge through expert hearings, public consultations and industry dialogue initiatives.

This includes activities such as the EU Cyberpolicy Forum, where Kaspersky brought together policymakers and industry leaders to discuss the future of cybersecurity in Europe, as well as training programs and webinars designed to support companies and public institutions on their path to compliance with the requirements of the NIS 2 Directive.

In addition, Kaspersky launched an internal compliance program with the requirements of the NIS 2 Directive several years ago and continuously aligns its processes, documentation and risk management practices with technological developments, changes in the threat landscape and regulatory requirements.

Strong foundation in transparency and implementation of internationally recognized standards

Transparency has become a fundamental requirement of the modern digital environment.

Through its Global Transparency Initiative (GTI), launched in 2017, Kaspersky implements a series of concrete measures that allow the broader cybersecurity community and other stakeholders to verify the integrity and reliability of its products, internal processes and business activities.

These activities are further confirmed by internationally recognized certifications and audits conducted by independent institutions.

Kaspersky is ISO/IEC 27001 certified, one of the most recognized international standards for information security management.

This framework provides a structured approach to identifying and managing information security risks, implementing appropriate controls and continuously monitoring their effectiveness.

The certification is based on independent audits covering key systems and processes for processing and storing data within Kaspersky’s global infrastructure.

In addition, Kaspersky has renewed its SOC 2 Type II audit, which confirmed that the development and delivery of antivirus databases are effectively protected from unauthorized changes.

Both ISO 27001 certification and SOC 2 audits are conducted by independent third parties and are part of Kaspersky’s Global Transparency Initiative, further strengthening trust through continuous verification of the company’s security practices.

– Our long-standing efforts in implementing a wide range of transparency measures and independent third-party certifications provide a solid foundation for compliance with the requirements of the NIS 2 Directive and confirm Kaspersky’s commitment to verifiable security practices and accountability – said Waldemar Bergstreiser, CEO of Kaspersky Labs GmbH.

Independent assessments, such as the AV-Comparatives Transparency Review and Accountability in Cyber Security study, have further highlighted the company’s leadership in transparency and accountability in the cybersecurity industry, underscoring the importance of measurable trust and good corporate governance in today’s digital environment.

Kaspersky supports the increasing integration of transparency requirements and internationally recognized risk management standards into European legislation.

In this context, the company also welcomes the alignment between the NIS 2 Directive and related initiatives, such as the Cyber Resilience Act (CRA), which promotes security by design and greater transparency.

Looking ahead: cooperation with BSI and European partners

By sharing expertise and threat intelligence, Kaspersky aims to further strengthen Europe’s resilience to cyber threats and support organizations in navigating an increasingly complex regulatory environment.

Building on its long-standing involvement in European cybersecurity policymaking, active contribution to public-private partnerships, and a solid foundation based on transparency and internationally recognized standards, such as ISO/IEC 27001 and SOC 2, the company continues to support organizations and relevant institutions in meeting the requirements of the NIS 2 Directive and strengthening cyber resilience across the region.

– Kaspersky looks forward to future cooperation with the German Federal Office for Information Security (BSI) in its role as the market surveillance authority, as well as active participation in public-private partnerships and expert forums – concludes Waldemar Bergstreiser, CEO of Kaspersky Labs GmbH.

– The company expresses its great gratitude for the comprehensive information provided by the BSI regarding the implementation of the NIS 2 Directive, which offers the entities affected by it valuable guidance and support in the implementation process.

Kaspersky

Kaspersky

German Federal Office for Information Security

BSI

NIS 2 Directive

Kaspersky Labs GmbH

EU Cyberpolicy Forum

Global Transparency Initiative

GTI

AV Comparatives Transparency Review and Accountability in Cyber Security

Waldemar Bergstreiser

cyber security