Germany’s IT Security Act: Why Europe is Watching

In 2015, the Bundesrat passed legislation requiring more than 2,000 critical service providers to implement a new minimum standard of information security procedures. Once work on the decree is finalised and provisions are accounted for owners of national critical national infrastructure (CNI) – currently anticipated for April-May – those tasked with undertaking the order will include providers of transportation, utilities, energy, health, finance, telecommunications and insurance firms, all of which manage data that could cause serious disruption to the public should it fall into the wrong hands. In this article, ICS Cyber Security DACH speakers from the authorities involved in the creation of these regulations discusses the potentially crippling fines operators face should they fail to meet standards...

[inlinead]