The IT Security Act, or IT-SiG for short, places new requirements on operators of critical infrastructures. It obliges them to report extraordinary IT disruptions to the BSI that have led to a supply failure - or could lead to such a scenario. The IT Security Act 2.0 is expected to be passed this spring. It anchors anomaly detection for CRITIS companies and organisations. The implementation period to take the necessary precautions will then be only one year.

Therefore, special attention in cyber defence must be paid to attack detection in the future, not only for CRITIS but also for OT. After all, the ever-growing potential for disruption through unregulated network access, e.g. via remote maintenance connections, leaves many plant operators with a queasy feeling as well as ...