KRITIS – why locking system management is so important

KRITIS –
why lock system management is so important

The protection of critical infrastructures and terms like KRITS and NIS2 are currently on everyone's lips. Attacks on railway networks or the TESLA power supply as well as daily cyber attacks make it clear how sensitive our critical infrastructure is. To protect them, all security measures must work together. This blog article shows how portier can support both operators of critical infrastructures and security retailers and locking system manufacturers with this important topic.

Definition KRITIS

The Federal Office for Information Security (BSI) defines it like this:

"Critical infrastructures (KRITIS) are organizations and institutions of vital importance to the national community, whose failure or impairment would result in lasting supply shortages, significant disruptions to public safety, or other dramatic consequences."

Sectors of Critical Infrastructures

All organizations from these sectors, regardless of their size, are considered Critical Infrastructures:

1. Energie
2. Information technology and telecommunications
3. Transport und Verkehr
4. Gesundheit
5. Media and culture
6. Wasser
7. Ernährung
8. Finanz- und Versicherungswesen
9. Siedlungsabfallentsorgung
10. Staat und Verwaltung

Rechtsgrundlagen

The legal basis for critical infrastructures and their operators is the Act on the Federal Office for Information Security (BSIG).
At the end of 2022, the second EU directive on network and information security (NIS-2 directive) was published. Member states must transpose the directive into national law by October 2024.

This means that far-reaching cybersecurity requirements and extensive resilience specifications are now facing thousands of new companies and existing operators!

"The current situation is tense. Our infrastructures – including government facilities – are attacked daily. The war in Ukraine has further exacerbated this situation. But organized crime also attacks daily. We all know the corresponding consequences from the media. With the implementation of the NIS 2.0 Directive (Cyborg Security), which will take place in Germany this year, the corresponding draft bill has been published, around 30,000 to 40,000 companies will be newly identified as critical infrastructures and will be legally required to implement appropriate security measures. This is the first step in the right direction."

What does that have to do with locking system management?

The specification of the requirements for the measures to be implemented in accordance with § 8a paragraph 1 BSIG contains numerous security regulations and related organizational measures.

In addition to secure key management, which in this context refers to the security measures concerning digital access authorizations, personnel and organizational security as well as structural and physical security, such as perimeter protection and physical access control, are also regulated there.

Excerpt from the catalog of measures: “Physical access protection Access points to premises or buildings that house sensitive or critical information, information systems or other network infrastructure for the operator of a critical service are secured and monitored by physical access controls to prevent unauthorized access.”

So here, among other things, secure mechanical and electronic locking systems and access control are required! To prevent unauthorized access, professional locking system management is also necessary. Because even the best locking system becomes almost worthless in terms of security if there is no precisely documented record of key management and access authorization by authorized persons. Genau hier ist portier der ideale Partner!

Vorteile für Betreiber kritischer Infrastrukturen

portier optimizes the management of mechanical locking systems that are essential in critical infrastructures. With our software, operators of KRITIS facilities can efficiently keep track of key assignments, access authorizations, and cylinder management. This not only improves security but also ensures that compliance requirements can be met more easily.

Vorteile für Sicherheitsfachgeschäfte

For security specialist shops, portier offers a comprehensive software solution that enables them to expand their services related to the installation and management of mechanical locking systems. Our software supports the digitalization of documentation processes and provides an accurate record of key history, which helps specialist shops offer a more precise and trustworthy service.

Benefits for Schließanlagenhersteller

Lock system manufacturers benefit from using portier by being able to position their products as compatible with leading management software. This increases the attractiveness of their mechanical locking systems for modern security concepts in businesses and organizations that require efficient management and documentation capabilities.

Guide to KRITIS compliance

portier erleichtert die Compliance mit KRITIS durch eine detaillierte Nachverfolgung und Dokumentation aller Schlüsselbewegungen und Zugangsberechtigungen. Unsere Software stellt sicher, dass alle notwendigen Informationen für Audits und Sicherheitsüberprüfungen schnell und einfach zugänglich sind, was die Einhaltung von Sicherheitsvorschriften vereinfacht.

Fazit

The topic of KRITIS and NIS2 will in the future affect many, if not almost all, companies. Because even if they do not fall within the legal framework, they are often suppliers to KRITIS companies, which must also carefully select, if not even audit, their suppliers. Since the legal requirements will take effect soon, it is important to engage thoroughly with this topic and take the necessary actions.

portier is at the forefront of innovation in the field of mechanical locking system management, offering solutions specifically tailored to the needs of critical infrastructure. By enhancing security measures and streamlining compliance processes, portier is the ideal partner for operators of critical infrastructure, security specialists, and manufacturers of locking systems.

Stay informed!

Sign up for our newsletter to receive the latest updates, tips, and information to help you stay up to date and optimize your security measures.

Sources and further information: Federal Office for Information Security (BSI), Bundesverband für den Schutz Kritischer Infrastrukturen e.V. (BSKI), OpenKRITIS Fotos: Pixabay, BSKI