Bird's eye view of a road junction with easily visible it-sa logo.

Critical infrastructures (KRITIS) - importance and protection

Critical infrastructures (KRITIS) are the backbone of our modern society. But what dangers threaten these essential systems? What obligations do Critical infrastructures (KRITIS) operators have and how are security standards complied with? Find out everything you need to know on this topic and stay up to date with our knowledge portal!

To the knowledge portal
Obligations for operatorsPresentationsArticles
Empty bridge surrounded by buildings.

Introduction to critical infrastructures

Critical infrastructures (KRITIS) are essential facilities for the community. Failures can cause supply bottlenecks and disrupt public safety. Operators must implement security measures to protect operations and increase resilience.

Critical infrastructure sectors

Flooding in a wide street alley.

Natural hazards

Natural hazards such as flooding or pandemics pose serious risks to critical infrastructure (KRITIS). Flooded roads can disrupt supply chains, while overcrowded hospitals in pandemics put a strain on healthcare. Companies need to take preventative measures to manage such events and minimize the impact.

An electricity pylon with sparks on the wires against a clear sky.

Technological hazards

Technological hazards such as power outages or technical faults can have far-reaching consequences for Critical infrastructures (KRITIS). A widespread power outage could bring critical services to a standstill. Operators must therefore carry out risk analyses and draw up emergency plans to ensure the resilience of their systems.

Person behind a transparent panel with technological visualizations

Cyber threats

Cyber threats such as hacker attacks and malware attacks are one of the biggest threats to critical infrastructure. However, faulty software updates or misconfigurations can also disrupt essential services. To prevent such incidents, operators should use modern IT security solutions and train their employees regularly.

Branching highways that run over and under each other.

Critical infrastructure sectors

Critical infrastructures (KRITIS) cover a large number of essential areas of the community. The most important sectors include energy supply, water supply, food, healthcare, information and communication technology (ICT), finance and insurance, transport and traffic as well as public administration. The protection of these sectors is of central importance, as failures in one area can have a massive impact on society. 

Persons who receive a lecture from a speaker on stage behind a lectern.

Measures to protect critical infrastructures

Critical infrastructure protection requires preventive, operational and reactive measures. These include risk analyses, emergency plans and IT security measures to protect against cyber attacks. Redundancy concepts safeguard operations in the event of technical failures, while training and reviews of security concepts ensure that new threats can be dealt with flexibly. In order to strengthen the protection of the population, Kritis operators are subject to regulations that support the security of supply in Germany.

A statue of a woman holding the scales of justice.

Obligations for critical infrastructure operators

There are legal regulations and standards to ensure the security and resilience of critical infrastructures. The EU's NIS 2 Directive and the forthcoming national implementation law entail extended requirements for critical infrastructure operators.
Critical infrastructure operators are obliged to:

  • Designation of a contact point for the operated critical infrastructure
  • Notification of IT disruptions or significant impairments to the responsible authorities
  • Implementation of ‘state of the art’ IT security, adapted to the new requirements of the NIS 2 Directive
  • Proof of compliance with security requirements, probably at shorter intervals and with more detailed checks

With the implementation of the NIS 2 Directive, the group of affected companies will be expanded and stricter security obligations are expected.
We have a selection of articles in our library that provide information on the legal regulations.

Find articles now

Exclusive presentations on the topic of KRITIS

external video thumbnail

Ransomware

Panel on the topic of ransomware as a threat to IT security and the question of how we can still defend ourselves. With Daniel Lorch, Chief Inspector of Criminal Investigation Esslingen and Stefan Strobel from Cirosec GmbH, the central contact point for cybercrime for the economy in Bavaria.

external video thumbnail

Digital first aid

IT security incidents often occur unprepared and at the wrong time. Digitally trained first responders (including IT laypersons) can provide rapid first aid in the event of incidents or offer specific recommendations for support.

People who are sitting at a conference table-

More presentations

Always stay up to date on critical infrastructures (KRITIS)! Take the opportunity to expand your expertise and follow the latest developments.

To the presentation overview page

IT Security Talk: Regulation

on 05/27/2025 | live & digital

This time our guests are:

Marc Dönges: “IT security consulting for small companies”

Dr. Thomas Lapp: “Will E2EE become the standard for emails?”

Jannik Schumann: “Standards inIT industry: requirements, opportunities, practice”

Join May's IT Security Talk

Deepen your knowledge in the field of critical infrastructures

As an it-sa 365 user, you have exclusive and free access to

✅ Interactive live formats

✅ Further on-demand presentations with over 200 recordings on the topic of KRITIS

✅ Direct dialogue with IT security experts - over 2,500 contacts from the relevant business sectors


Register now and secure access to our comprehensive knowledge hub, which offers you up-to-date knowledge on KRITIS and IT security at all times.

Articles on the topic of critical infrastructure

People in a meeting.

Critical Infrastructure: Global communication at risk - Rethinking cybersecurity

The critical infrastructure sector is facing major challenges and a broader understanding of critical infrastructure is becoming necessary: Global conflicts are threatening the communications infrastructure. Submarine cables, the central arteries of the internet, are increasingly the target of attacks. Outages can cut off entire countries from the internet. Protecting this critical infrastructure is becoming a government task and will not be possible without international cooperation.

To the article ‘Critical Infrastructure: Global communication at risk’
Rectangular, coloured panels in a modern room.

More articles

Always stay up to date on critical infrastructures (KRITIS)! Take the opportunity to expand your expertise and follow the latest developments.

To the article overview
Several people leaning against a wall and partly smiling into the camera.

Become part of the it-sa 365 community!

Not yet an it-sa 365 user? As the digital HOME OF IT SECURITY, the platform is available to you all year round - free of charge and with access to exclusive content.
Registered users can take part in IT security talks, events and interactive formats 365 days a year and engage in direct dialogue with experts. Stay informed about the latest news about it-sa 365 and it-sa Expo&Congress in Nuremberg.

Enrich the it-sa 365 community and benefit from exclusive expertise, events and networking opportunities!

Find the right partner to protect critical infrastructures