The KRITIS Umbrella Act and the NIS-2 Directive – Their Impact on Businesses

What do the KRITIS Umbrella Act and the NIS-2 Directive mean for affected companies?

Germany is soon set to implement the KRITIS Umbrella Act – a measure aimed at strengthening the resilience of critical infrastructures. With the implementation of the European NIS-2 Directive, additional requirements are introduced, particularly in the areas of Business Continuity Management (BCM), crisis management, and physical security. Operators of critical infrastructure and many other companies are therefore facing new challenges and obligations that must be fulfilled to enhance resilience.

Under NIS-2, additional requirements apply to entities in sectors such as healthcare, digital services, finance and insurance, IT, public administration, and more. An overview of affected entities and their thresholds can be found on OpenKRITIS at the following link:

Entities under NIS 2 – OpenKRITIS

The KRITIS Umbrella Act also applies to operators of critical infrastructure in sectors such as energy, transport, and traffic. The definitions of these facilities and their threshold values can also be found on the OpenKRITIS platform:

KRITIS Umbrella Act: Resilience of Critical Infrastructure

The KRITIS Umbrella Act was created to protect critical infrastructure from growing threats such as sabotage, espionage, natural disasters, or supply disruptions. The NIS-2 Directive complements these protective measures, placing special emphasis on business continuity management, crisis management, and physical security.

Our solutions are based on a risk-based and holistic approach. Comply with legal requirements through our proven partnership and sustainably strengthen the safety and resilience of your company.