{
  "meta": {
    "version": "1.0.0",
    "asOf": "2026-07-05",
    "currency": "EUR",
    "scope": "Germany (NIS2UmsuCG); market rates DACH",
    "license": "CC BY 4.0",
    "licenseUrl": "https://creativecommons.org/licenses/by/4.0/",
    "notes": {
      "de": "Orientierungswerte auf Basis öffentlicher Quellen — keine Angebotskalkulation und keine Rechtsberatung.",
      "en": "Guide values based on public sources — not a quote and not legal advice."
    },
    "sources": [
      {
        "id": "gesetzesbegruendung",
        "name": "Gesetzentwurf NIS2UmsuCG, BT-Drs. 20/13184 — E.2 Erfüllungsaufwand für die Wirtschaft",
        "url": "https://dserver.bundestag.de/btd/20/131/2013184.pdf"
      },
      {
        "id": "openkritis",
        "name": "OpenKRITIS — Die Kosten der NIS2-Umsetzung für Unternehmen und Bund",
        "url": "https://www.openkritis.de/it-sicherheitsgesetz/kosten-nis2-wirtschaft-bund.html"
      },
      {
        "id": "enisa-nis-investments-2025",
        "name": "ENISA NIS Investments 2025 (1.080 Organisationen)",
        "url": "https://www.enisa.europa.eu/publications/nis-investments-2025"
      },
      {
        "id": "marktpreise",
        "name": "Marktpreise DACH: Beratungs-Tagessätze, ISO-27001-Projekt- und Auditkosten, ISMS-/GRC-Lizenzen (Stand 07/2026)",
        "url": "https://directive0.eu/nis2/kosten/"
      }
    ]
  },
  "benchmarks": {
    "gov": {
      "totalOneOffEur": 2100000000,
      "totalAnnualEur": 2200000000,
      "affectedEntities": 30000,
      "avgOneOffEur": 70000,
      "avgAnnualEur": 73000,
      "shareWithSufficientMeasures": 0.17,
      "sourceId": "gesetzesbegruendung"
    },
    "consultingDayRateEur": [
      1000,
      2000
    ],
    "internalDayCostEur": [
      400,
      700
    ],
    "iso27001FirstYearEur": [
      50000,
      150000
    ],
    "iso27001GapIfCertifiedEur": [
      20000,
      50000
    ],
    "iso27001CertAuditEur": [
      10000,
      25000
    ],
    "softwareLicenceEurPerMonth": {
      "starter": [
        350,
        600
      ],
      "professional": [
        800,
        1800
      ]
    },
    "trainingPerPersonEur": [
      200,
      500
    ],
    "supplierAssessmentEurPerYear": [
      1000,
      2000
    ],
    "ongoingShareOfOneOff": [
      0.2,
      0.3
    ]
  },
  "model": {
    "baseline": {
      "internalDaysOneOff": {
        "s0": [
          5,
          15
        ],
        "s1": [
          30,
          60
        ],
        "s2": [
          45,
          90
        ],
        "s3": [
          80,
          160
        ],
        "s4": [
          150,
          400
        ]
      },
      "externalDaysOneOff": {
        "s0": [
          0,
          5
        ],
        "s1": [
          15,
          30
        ],
        "s2": [
          25,
          50
        ],
        "s3": [
          45,
          90
        ],
        "s4": [
          80,
          200
        ]
      },
      "techInvestEur": {
        "s0": [
          0,
          10000
        ],
        "s1": [
          10000,
          40000
        ],
        "s2": [
          20000,
          80000
        ],
        "s3": [
          50000,
          150000
        ],
        "s4": [
          100000,
          500000
        ]
      }
    },
    "entityClassFactors": {
      "essential": 1.3,
      "important": 1,
      "chain": 1
    },
    "chainCap": {
      "internalDays": [
        5,
        20
      ],
      "externalDays": [
        0,
        8
      ],
      "techEur": [
        0,
        15000
      ]
    },
    "maturityFactors": {
      "isms": {
        "effort": 0.3,
        "tech": 0.15
      },
      "solid": {
        "effort": 0.6,
        "tech": 0.5
      },
      "low": {
        "effort": 1,
        "tech": 1
      }
    },
    "approachFactors": {
      "self": {
        "external": 0.3,
        "internal": 1.15,
        "licence": false
      },
      "platform": {
        "external": 0.5,
        "internal": 0.85,
        "licence": true
      },
      "consultant": {
        "external": 1,
        "internal": 1,
        "licence": false
      }
    },
    "platformLicenceEurPerYear": {
      "s0": [
        2000,
        6000
      ],
      "s1": [
        4000,
        8000
      ],
      "s2": [
        9000,
        22000
      ],
      "s3": [
        15000,
        45000
      ],
      "s4": [
        30000,
        90000
      ]
    }
  }
}