Introduction

The terms KRITIS and NIS2 are central to the current discussion about the security of critical infrastructures. KRITIS stands for critical infrastructures, which are defined under the BSI Act and BSI-KRITIS. These infrastructures are essential for the functioning of society and therefore require special protection.

KRITIS and NIS2

The NIS2 Directive (Network and Information Systems Security) expands the original NIS framework and sets specific requirements to enhance cybersecurity. Companies operating in certain sectors must ensure compliance with NIS2 requirements to avoid penalties.

Compliance and Asset Management

Lansweeper and Iron Mountain highlight the importance of comprehensive asset management for NIS2 compliance. Organizations must maintain a complete inventory of their IT, OT, IoT, and cloud assets to ensure all relevant information is available. Compliance with the NIS2 Directive requires appropriate technical measures that must be demonstrably implemented.

Conclusion

Compliance with the NIS2 Directive is not only a legal obligation but also an essential component of a robust cybersecurity program. Companies should take proactive measures to protect their critical infrastructures and meet NIS2 requirements.