Published by Global Banking & Finance Review®
Posted on September 10, 2025
2 min readLast updated: January 22, 2026
Add as preferred source on Google
Germany enacts new rules to protect critical infrastructure, requiring companies in key sectors to enhance security measures in response to rising threats.
By Markus Wacket
Berlin, September 10 (Reuters) -The German government approved new rules on Wednesday that legally oblige operators of critical infrastructure in the country to protect their plants and networks.
The rules come in response to a sharp deterioration in the security environment since Russia's 2022 full-scale invasion of Ukraine and a growing awareness of Europe's vulnerability to natural disasters and sabotage or terrorist attacks on infrastructure.
The KRITIS law, which implements a European Union directive, obligates companies in sectors like energy, transport, finance, health and water to secure their installations.
That could include measures like building barbed-wire fences around power stations or installing security cameras and motion detectors. Companies must prepare inventories of vulnerable infrastructure and register them.
Authorities have been warning of the growing risks to critical infrastructure of sabotage by Russia or cyberattacks from China. They have blamed Russia for a series of firebomb attacks on mail infrastructure in Germany and Poland.
Both countries deny they conduct such campaigns.
At a minimum, German companies would have to examine their risk exposure, prepare resilience plans and report major outages to authorities, who can impose fines on entities that fail to follow the rules.
Under the law, infrastructure that provides services to at least 500,000 people counts as critical.
(Reporting by Markus Wacket; Writing by Thomas Escritt; Editing by Bernadette Baum)
The KRITIS law is a regulation in Germany that mandates operators of critical infrastructure to implement security measures to protect their facilities and networks.
The new rules were introduced in response to the deteriorating security environment following Russia's invasion of Ukraine and the increasing awareness of vulnerabilities to natural disasters.
The KRITIS law affects several sectors, including energy, transport, finance, health, and water, requiring them to secure their installations.
Companies that fail to comply with the KRITIS law can face fines imposed by authorities, emphasizing the importance of adhering to the new security measures.
Under the KRITIS law, companies must assess their risk exposure, prepare resilience plans, and report major outages to authorities.
Explore more articles in the Headlines category
