Talsperren als kritische Infrastrukturen aus dem Blickwinkel der Cybersicherheit

Cybersecurity gets more and more relevance for critical entities such as water industries. Due to legal regulations for critical infrastructure, operators are required to fulfill the state of the art in information security to protect their services. In addition to it-security requirements there are physical requirements to ensure resilience for facilities. This paper describes the actual legal requirements in Germany form IT-Sicherheitsgesetz 2.0 and expected requirements from NIS2 and RCA wich need to be implemented in German law till October 2024. Recommendations for implementation and preparation for operators on critical entities in water industries are given.