Implementation of the European Union’s NIS2 directive will require many German businesses to report cyberattacks rapidly or face substantial fines, adding new regulatory and administrative obligations for the Mittelstand.