Critical Infrastructures (KRITIS) are particularly sensitive institutions and facilities where failure or functional impairment would have disastrous consequences for the country and society. Critical infrastructures therefore also require special security management.

TERCENUM AG can advise organisations and security managers on specific protective measures in the area of critical infrastructures (KRITIS).

Protection of critical infrastructures

Security begins with effective management. Our security experts will advise and support you in the introduction of an information security management system that is geared to the specific requirements of your organisation. This will be based on the BSI IT Baseline Protection or ISO 27001 (native) standards. Depending on the sector, we also work in accordance with the guidelines of the German IT Security Act, EnWG, MaRisk/MaRisk (VA) or the German Telecommunications Act (TKG).

Specifically, this includes:

ISO 27011 Telecommunications

ISO 27015 Finance and Insurance

ISO 27017 IT

ISO 27018 Protection of personal data in the cloud

ISO 27019 Network operators

ISO 27799 Healthcare

Overview of services

  • Appointment of a proven information security and data protection officer
  • Introduction of an information security management system (ISMS)
  • Introduction of a company-specific data protection management system
  • Preparation and support for certification
  • Consulting on the administration, maintenance and updating of your ISMS

Make sure you have sustainable and comprehensive protection for your infrastructure. TERCENUM AG will support you with expertise and effective security measures.

Our consultants will be happy to help you.


KRITIS by industry

The Federal Ministry of the Interior subdivides critical infrastructures into nine sectors with associated industries:

Energie - Gesundheit -IKT-Transport und Verkehr - medien und Kultur - Wasser - Finanz und Versicherungswesen - Ernährung - Staat und Verwaltung

Energy: electricity, gas, mineral oil

Information technology and telecommunications: telecommunications, information technology

Transport and traffic: air transport, maritime transport, inland waterways transport, rail transport, road transport, logistics

Health: medical supplies, pharmaceuticals and vaccines, laboratories

Water: public water supply, public sewage disposal

Food: food industry, food trade

Finance and insurance: banks, stock exchanges, insurance companies, financial service providers

State and public administration: government and public administration, parliament, judicial institutions, emergency and rescue services, including civil protection

Media and culture: broadcasting (television and radio), print and electronic media, cultural heritage, symbolic buildings

You can find more on this topic at