KRITIS check for companies and operators

Press release /

Researchers at the Fraunhofer Institute for High-Speed Dynamics (Ernst-Mach-Institut, EMI) have developed a tool that allows companies and operators of critical infrastructures to quickly evaluate their need for action. This tool facilitates the efficient identification of security risks and the implementation of necessary measures.

© 24K-Production / stock.adobe.com
With the enactment of the KRITIS framework law stricter requirements apply for operators of critical infrastructures.

In late January 2026, the Bundestag passed the KRITIS framework law, aimed at enhancing the protection of security-relevant infrastructures in Germany against attacks, sabotage, and natural disasters. Operators of power plants, electricity suppliers, and other critical infrastructures will be subject to significantly stricter regulations. This includes, among other requirements, cross-sector minimum standards, systematic risk assessments, and continuous monitoring of disruptions.

 

Interactive resilience check comprising 36 questions

The Fraunhofer Institute for High-Speed Dynamics (EMI) responds to the new requirements with a web-based self-assessment tool which allows companies and operators to systematically evaluate their own resilience.

The tool’s core is an interactive questionnaire closely aligned with the legal framework. It covers 36 questions addressing risk analysis and assessment, resilience obligations and planning, as well as other legal requirements. The tool transparently highlights which measures have already been implemented and identifies specific issues where action is needed.

The online service is free of charge and requires registration. It complies with GDPR requirements, as no personal data is collected. The questionnaire takes less than 30 minutes to complete.

 

Strategic planning instead of retroactive adjustments

A mere inventory is not enough. “KRITIS operators aiming at enhancing their companies’ crisis resilience must invest in strategic initiatives—such as robustness, redundancy, resources, and responsiveness”, asserts Prof. Alexander Stolz, Head of the Department of Security and Resilience of Technical Systems at Fraunhofer EMI. “Although this requires effort, retroactive adjusments are ofen far more expensive than resilience-enhancing measures that are systematically integrated from the beginning.”

Fraunhofer EMI has been researching the security and resilience of technical systems for decades, providing support for decision-makers regarding the KRITIS framework law.

 

Link: Kritis