Bottom line: Germany integrates physical protective measures against drone attacks on electrical power, water, communications and transport infrastructure for the first time through the KRITIS Umbrella Law and NIS2 implementation.
Germany’s critical infrastructure has not been designed to withstand aerial attacks until now. The planned KRITIS Umbrella Law and the implementation of the NIS2 Directive explicitly address physical resilience requirements against hybrid threats for the first time.
Infrastructure for power supply, water distribution, telecommunications and transport is essential for the functioning of modern societies. Historically, however, their planning and architecture have been oriented towards conventional threat scenarios and not attacks by unmanned aircraft — a gap that is gaining relevance in current geopolitical scenarios.
The EU Commission and NATO have already responded to this threat landscape with their own action plans. Germany is now following suit: The planned KRITIS Umbrella Law and the implementation of the NIS2 Directive (Directive on Network and Information System Security) are to formulate for the first time explicit requirements for physical protective measures against hybrid threats — not only against cyber attacks, but also against drones and related aerial hazards.
For compliance officers in KRITIS enterprises, this means an expansion of their protective obligations: In addition to technical cybersecurity measures, physical resilience concepts must now be demonstrated. This affects both risk analysis and concrete measures to mitigate air-based attack vectors, such as airspace monitoring or mechanical protective devices at critical facilities.
Source: www.security-insider.de · Published 30 July 2026
Lumi AI News — AI-assisted curation in accordance with Art. 50 EU AI Act. Paraphrase and classification via Lumi News Pipeline v1.7.3.