Increasing attacks on critical infrastructures make it necessary to implement targeted legal measures to provide greater protection for properties and facilities in the future. We support you with our physical security and cybersecurity solutions. Implement the legal requirements directly at both levels – proven and reliable with one partner.
On 14 December 2022, the EU adopted the Critical Entities Resilience (CER) Directive to strengthen the physical security and resilience of critical infrastructures. The implementation into national law is carried out by the KRITIS framework law. In doing so, the legislator not only implements the requirements of the CER Directive, but also incorporates the requirements from the NIS2 Directive that apply to critical infrastructure. Thus, the KRITIS framework law contains requirements for both the physical and cybersecurity of critical infrastructures.
The white paper explains the central requirements of both laws. It also shows how operators of critical infrastructures and industrial companies must analyze risks, implement effective protective measures and comply with reporting obligations, and why a holistic security approach is important to protect building infrastructure.
The KRITIS framework law aims to improve the resilience and responsiveness of critical infrastructures. It combines cybersecurity regulations with physical security regulations. The focus of the law is on the introduction of minimum standards for physical protection and the guarantee of security of supply.
Operators of critical plants are required to carry out a risk analysis and assessment of their properties. An initial analysis and evaluation will be carried out for the first time on 17 January 2026, and every four years thereafter. In this way, the risk assessment should be continuously reviewed and the security status of your building technology should be kept up-to-date according to any changes in your needs. With our Cybersecurity Service Gap Assessment, we analyze the security status of your building technology systems, including processes, organization and on-site technology. You will receive a detailed overview of possible points of attack as well as concrete recommendations for action to close these security gaps and reduce cyber risks.
For the physical protection of the properties and critical facilities, the operator must take appropriate and proportionate technical, safety-related and organisational measures to ensure resilience. Based on the risk analysis and assessment, we work with you to create a holistic protection concept that includes both cybersecurity and physical security, and effectively implements the measures and controls. In doing so, we draw on our extensive portfolio of building security solutions and services, which can be flexibly adapted to your individual needs.
In the future, faults must be reported within 24 hours to a joint reporting office set up by the Federal Office for Civil Protection and Disaster Assistance (BKK) and the Federal Office for Information Security (BSI). To give you a quick overview of the situation, a
management system helps you by intelligently combining the individual alarms into an event and preparing them visually. An automated report enriched with further information from the cloud quickly gives you all the information you need to meet the time requirements.
We support you in complying with the legal requirements with our many years of experience and know-how. Our extensive portfolio offers you tailor-made solutions for your individual needs, so that you not only achieve 360-degree protection for your building, but also optimize building use and business processes.
As a founding member of the Charter of Trust, we are committed to proactively providing and continuously developing the most modern protection of businesses and infrastructure. This includes a holistic approach that takes into account both cybersecurity and physical security. Secure by design means ensuring that our products and solutions are protected throughout their lifecycle – from initial product design that meets industry-specific requirements and regulations, to continuous monitoring, control and proactive defense to ensure business continuity.
Since our portfolio covers not only building security, but the entire building technology, we understand the industry-specific requirements, the required technologies and their implementation requirements as well as related services like no other. Thanks to our intelligent, cross-disciplinary networking, we can implement comprehensive, seamlessly integrated solutions for you. By using backward-compatible technologies and open, standardized interfaces, we enable easy integration of existing third-party systems to protect your previous investments.
Siveillance Perimeter - Perimeter protection for all types of properties
Smart Video Security Solutions with Siveillance Video
SIPORT - Comprehensive access control system for high-security applications
With us, you get everything from a single source, from planning to maintenance. Our Planner & Architects Office is at your side in the planning of new buildings as well as modernization and expansion projects. In the operating phase, you benefit from our comprehensive service and our remote support 24/7. Digital services process your system data into valuable information that you can use for the continuous optimization of your systems. And nothing stands in the way of financing with Physical Security as a Service, a complete package consisting of hardware, software and the appropriate services at a monthly rate.
