The German government is working on a new law, known as the KRITIS umbrella law, to enhance the protection of critical infrastructures (KRITIS) beyond digital threats. The proposed law aims to increase resilience and physical protection of critical systems in various sectors, including energy, transportation, finance, healthcare, and more. The law would require around 2,000 operators of critical infrastructure to implement protective measures and develop plans for handling failures. The threshold for determining which providers fall under the law is set at 500,000 supply units. However, the draft bill leaves important questions unanswered and lacks clarity on several points. The law is expected to be passed by mid-October 2024, with obligations taking effect from January 1, 2026.
