KRITIS – Critical Infrastructures
KRITIS explained: Which facilities are considered critical infrastructure and what verification obligations result.
IT Glossary
In brief
Entities are considered KRITIS if their failure would significantly impair essential services to the population, for instance in energy, water, healthcare, transport, finance and digital infrastructure. Whether an operator falls under this scope depends on the sector and thresholds specified in the respective regulation.
Special obligations apply to KRITIS operators: appropriate state-of-the-art technical and organisational measures, reporting significant disruptions to the BSI and regular proof of implementation. This proof can be provided, among other ways, via a certified management system.
The requirements overlap significantly with NIS2 and can usually be addressed together in practice, technically via hardened infrastructure, organisationally via an ISMS in accordance with ISO 27001.
Solutions in a new dimension.
One conversation is enough to find out where IT, Microsoft Cloud and AI can take real weight off day-to-day business.
Your contact: Daniel Penninger, Managing Director