In our highly interconnected world, there are facilities without which our everyday life would be hardly imaginable. These so-called Critical Infrastructures form the backbone of our society – but what exactly lies behind this term?
What are Critical Infrastructures?
Critical Infrastructures, abbreviated as KRITIS, encompass all those organizations and facilities that are essential for the functioning of our community. Their failure or impairment would lead to serious consequences: from supply shortages to disruptions of public security to far-reaching societal impacts.
The Ten Pillars of Our Infrastructure
The spectrum of KRITIS sectors is broad and includes:
- Energy: Electricity supply, gas networks, power plants
- Information Technology and Telecommunications: Data centers, mobile networks
- Transport and Traffic: Airports, train stations, logistics centers
- Health: Hospitals, pharmaceutical supply
- Media and Culture: Broadcasting, important cultural institutions
- Water: Drinking water supply, wastewater disposal
- Food: Food production, wholesale markets
- Finance and Insurance: Banks, payment transactions
- Municipal Waste Management: Garbage collection, disposal facilities
- Government and Administration: Authorities, security agencies
Important to know: All organizations in these sectors are fundamentally considered Critical Infrastructures – regardless of their size.
Legal Regulation: Who is Affected?
Not all KRITIS sectors are subject to the same legal requirements. The areas “Government and Administration” and “Media and Culture” are not regulated by the BSI Act (BSIG).
For the remaining eight sectors, the following applies: The BSIG defines in § 2 paragraph 10 Critical Infrastructures as facilities, installations, or parts thereof that are of high importance for the functioning of the community. Their failure or impairment would result in significant supply shortages or threats to public security.
The BSI Critical Infrastructure Ordinance: When Do the Obligations Apply?
But when exactly is a facility “critical” in the sense of the law? This is where the BSI Critical Infrastructure Ordinance comes into play. It establishes specific thresholds above which an infrastructure is classified as critical.
If a facility reaches or exceeds these thresholds, the legal reporting and verification obligations of the BSIG apply. Operators must then comply with certain security standards and report incidents.
Even Below the Threshold: Protection is Important
An important note: Even if your facilities do not reach the thresholds in the individual sectors, protecting your infrastructure is of great importance. Participation in the UP KRITIS (Implementation Plan for Critical Infrastructures) is therefore recommended even for smaller operators.
Further Information
Comprehensive information on the protection of Critical Infrastructures can also be found on the websites of the Federal Ministry of the Interior and Community (BMI).
The most important downloads for KRITIS operators and auditors can be found on the BSI website.
This article provides an overview of Critical Infrastructures in Germany. For detailed information about your specific situation, we recommend consulting with specialized experts.
