The NIS 2 Directive (Network and Information Systems) is a binding EU regulation designed to strengthen cybersecurity, which was transposed into German law in December 2025. It requires companies in the critical infrastructure sector (KRITIS) to comply with higher security standards and reporting obligations. This also includes many wind farm operators. The directive also obliges these companies to comply with cybersecurity standards for suppliers and service providers.
After review, Light:Guard does not itself fall under the criteria of the NIS2 regulation and is therefore not subject to NIS2 reporting requirements.
Regardless of this, as a service provider in a KRITIS-related environment, we are certified according to ISO 27001 – as the only provider of Aircraft Detection Lighting System (ADLS).
As part of our ISO 27001-certified information security management system (ISMS), we implement the following measures, among others, so that NIS 2-affected operators and plant managers can continue to plan with us:
Technical measures
✔ Access controls
✔ Patch and update management
✔ Backup and recovery strategies
✔ Defined incident response processes
Organizational measures
✔ Regular training
✔ Existing emergency and recovery plans
✔ Structured supplier evaluation
In addition, we have established a clearly defined reporting process for security-critical incidents.
With these measures, we meet the requirements relevant for service providers in the NIS2 environment and support you as an operator in fulfilling your own NIS2 obligations and demonstrating compliance to authorities and audit bodies.
These certifications guarantee you the highest standards in quality, data security, and process stability—from development and operation to support for our ADL systems.