Protection of critical infrastructure
360-degree security for critical infrastructure operators
In mid-March 2026, the new Critical Infrastructure Umbrella Act (KRITIS-Dachgesetz) entered into force. It aims to sustainably strengthen the physical resilience of critical infrastructures (KRITIS), establish high and uniform security standards, and, for the first time, closely integrate physical protection and cybersecurity in line with an all-hazards approach.
Around 2,000 operators of critical infrastructure fall under the new legal provisions and are subject to a mandatory registration requirement with the Federal Office of Civil Protection and Disaster Assistance, BBK (see below). In addition, they must comply with extensive requirements, such as establishing a Business Continuity Management (BCM) system and implementing comprehensive physical and organizational security measures.
Our services at a glance
Critical infrastructures (KRITIS) are essential to ensuring supply security and the stability of our society. These include energy supply, healthcare, transportation, IT, and many other sectors. Their protection requires specialized expertise and holistic solutions.
- Analysis and Risk Management
Professional Business Continuity Management (BCM) is essential for maintaining critical processes in crisis situations. German Business Protection (GBP), part of the KÖTTER Security Group, offers comprehensive solutions for this – from process and resource analysis to customized security packages. Holistic risk management forms the basis for a customized security concept.
- Physical Security
Personnel security through plant security as well as modern technology such as video surveillance, access control, perimeter protection and drone monitoring, detection and counter-drone systems ensure the protection of your locations. Our control center monitors your locations and systems around the clock and responds to incidents within seconds.
- Fire Protection and Rescue Services
Individual fire protection concepts, company and plant fire departments, and company rescue services minimize risks and ensure rapid assistance in emergencies.
- Employee Protection and Training
Occupational health and safety, as well as awareness and behavioral training, strengthen your workforce's safety awareness and protect your employees.
- Digital Security and Information Protection
Through our involvement with the cyber security specialist G.I.P., we offer you comprehensive IT security solutions of the highest standard. Our certified experts develop customized concepts to defend against cyberattacks and strengthen your IT resilience.
With Cyber Defense as a Service (CDaaS), we integrate your IT landscape into active security monitoring. A Security Operations Center (SOC) with state-of-the-art SIEM technology detects attacks in real time. Our Cyber Security Solutions ensure effective threat monitoring for local, cloud, and hybrid environments.
We offer our customers comprehensive consulting services in the area of cloud security. With our broad expertise in private cloud solutions, public clouds, and traditional (hybrid) IT, we support you in choosing the right strategy. Our particular focus is on leveraging existing technologies and tools. Our IT compliance solutions also support compliance with regulatory requirements.
Data center security
Data centers are the heart of digital infrastructure and are subject to the highest security requirements. KÖTTER Security offers customized security solutions to ensure the reliable operation of these sensitive facilities. Our services include physical protection through access control, video surveillance, and perimeter security, as well as specialized security personnel. Fire protection concepts and IT security solutions also ensure protection against physical and digital threats. With our Security Operations Center (SOC), we also offer continuous monitoring for the early detection and defense of cyberattacks.
Why KÖTTER Security?
As Germany's largest family-run security company, we have been protecting people, businesses, and infrastructures since 1934. With state-of-the-art technology, we offer you the highest level of security and reliability. Our many years of experience in securing critical infrastructures make us your reliable partner.
Trust KÖTTER Security to protect your critical infrastructures and ensure security of supply.
Avoiding penalties by complying with legal requirements
Operators of critical infrastructures are subject to strict legal requirements, non-compliance with which can result in heavy penalties. Under the KRITIS umbrella law, for example, an operator of critical facilities is required to submit to the Federal Office of Civil Protection and Disaster Assistance the information relevant for registration pursuant to Section 8 no later than three months after a facility is classified as critical, but no earlier than 17 July 2026.
KÖTTER Security helps you comply with all relevant regulations and minimize legal risks. Our experts support you with:
- Consulting and training: Information on current security requirements such as the KRITIS law, the NIS2 Directive and the IT Security Act and the BSI Critical Infrastructure Ordinance.
- Risk assessment and security concepts: Development of customized solutions to identify and minimize security risks.
- Implementation of protective measures: Support in the introduction of technical and organizational security standards.
- Monitoring and Incident Response: Continuous security monitoring and rapid response capabilities to incidents.
- Audits and Certifications: Support with certifications and regular audits to ensure compliance with legal requirements.
