Gastkommentar: Entrümpelt die Regeln und schützt damit die Umspannwerke

Recent attacks on substations in Jänschwalde and Bergheim demonstrate that energy and water supplies, telecommunications or public transportation are increasingly targeted by hybrid threats – from cyberattacks to sabotage. Protecting critical infrastructure (Kritis) has become one of the central security tasks of our time. In recent years, Brussels and Berlin have introduced numerous provisions to strengthen the security of critical infrastructure.

These include the European Cybersecurity Directive and the CER Directive, implemented in Germany as the Kritis Umbrella Law. The aim of all these laws is undoubtedly correct. However, they focus too much on documentation, evidence and legal protection, rather than on effective security measures, resulting in excessive double and multiple regulation in practice.

This problem is further exacerbated by new laws affecting companies' protective measures, unfortunately adding more hurdles. The European AI Regulation is particularly relevant. Modern monitoring systems of critical infrastructure locations increasingly contain AI components.