Germany integrates physical protective measures against drone attacks on electrical power, water, communications and transport infrastructure for the first time through the KRITIS Umbrella Law and NIS2 implementation.
The actual number of registered NIS2 enterprises fell significantly short of the expected 29,500, prompting the BSI to extend the registration deadline from March to July 2026.
Nearly 30,000 German SMEs must align their cybersecurity with NIS2 standards by October 2024, which represents a significant resource and organizational challenge for many.
CISA and international authorities recommend physical or tiered network isolation for OT systems of critical infrastructure with regular full tests and manual operation in an isolated state.