KRITIS

What is KRITIS?

KRITIS is the German abbreviation for critical infrastructure (kritische Infrastrukturen): organisations and facilities of particular importance to society whose failure would lead to significant supply shortages or hazards. In Germany the protection is regulated by law, including the BSI Act (BSI-Gesetz).

Which sectors count as KRITIS?

The KRITIS sectors include energy, water, food, information technology and telecommunications, health, finance and insurance, transport, and municipal waste management. Whether a facility counts as KRITIS depends on thresholds set in the BSI Critical Infrastructure Ordinance (BSI-KritisV).

What obligations do KRITIS operators have?

KRITIS operators must take appropriate technical and organisational measures according to the state of the art, demonstrate these to the Federal Office for Information Security (BSI), and report significant security incidents.

KRITIS, NIS2 and the KRITIS umbrella act

The NIS2 Directive tightens IT security requirements and expands the affected group. The planned KRITIS umbrella act (KRITIS-Dachgesetz) additionally addresses the physical resilience of critical infrastructure. Many operators therefore have to observe several frameworks at once.

How SecureCloud supports KRITIS operators

SecureCloud offers a platform hosted in Germany that is GDPR-compliant, ISO 27001- and Trusted-Cloud-certified, BSI C5-attested and CIS-compliant. Encryption, granular access control and a complete audit log support operators in meeting their IT security obligations.

Industry-specific implementation: public sector and financial sector.

What does KRITIS mean?

KRITIS stands for critical infrastructure, meaning facilities of particular importance to society whose failure would significantly impair public supply.

Which sectors belong to KRITIS?

KRITIS includes energy, water, food, IT and telecommunications, health, finance and insurance, transport, and municipal waste management.

What is the difference between KRITIS and NIS2?

KRITIS is the German framework for critical infrastructure. NIS2 is an EU directive with a broader range of sectors that raises the requirements for many KRITIS operators as well.