Service Finder

back

Designate contact point as critical infrastructure operator

Service Description

Critical infrastructures are organizations and facilities that are of great importance for the functioning of the community and whose failure or impairment would result in significant supply bottlenecks or threats to public safety.

If you operate a critical infrastructure within the meaning of the legal provisions, you must provide the Federal Office for Information Security (BSI) with a contact point where you can be reached at any time. The BSI will send you various information to this address, for example warnings on IT security and situation information.

As a rule, the BSI sends out information during normal business hours. In exceptional cases, urgent warnings can also be sent outside normal business hours, i.e. on public holidays, at weekends or at night.

Process flow

You can name the contact point via the BSI's reporting and information portal:

  • Go to the BSI's reporting and information portal.
    • If your organization is already registered, you can log in via "Login".
    • If not, you can start the registration process by clicking on "Register". You will then receive the access data by post.
  • Complete the form for naming a contact point in full.
  • Then complete an "Annex 2" for each of your infrastructures.
  • You can then check your data again and send it off.
  • After submitting, you can save your form as a PDF file. Print out the form, sign it and send it to the BSI's KRITIS office.
  • The BSI will check your registration.
  • You will receive confirmation of your registration by e-mail and further information and documents by post once registration is complete
  • If you have any questions about the registration process, you can contact the BSI's KRITIS office. If you have technical questions about the registration portal, please contact the registration office at the National IT Situation Center.

Note: If you do not name a contact point, the BSI can carry out the registration itself and inform the responsible federal supervisory authority.

Requirements

You must appoint a contact point if your organization operates critical infrastructure, i.e:

  • You belong to one of the following sectors:
    • Energy
    • water
    • food
    • Information technology and telecommunications
    • Healthcare
    • Finance and insurance
    • Transportation and traffic
  • They provide services to the general public in these sectors, the failure or impairment of which would lead to significant supply bottlenecks or threats to public safety (critical services).
  • You reach or exceed certain thresholds that apply per sector and for the respective facilities. For example, if your facilities can generate a certain amount of energy or produce a certain amount of water.

Which documents are required?

As a rule, you do not need to submit any additional documents.

What are the fees?

The BSI does not charge any costs for designating the contact point.

What deadlines do I have to pay attention to?

As soon as you are considered an operator of a critical infrastructure for the first time or again, you must designate a contact point by the next working day at the latest.

Processing duration

It usually takes 1 to 2 weeks to process your notification.

Legal basis

Applications / forms

  • Objection
  • If you do not agree with an administrative act of the Federal Office, you can usually lodge an objection with the Federal Office. This is also indicated in the information on legal remedies at the end of the decision.
  • In the appeal procedure, the Federal Office will review the decision it has made, taking into account the arguments you have put forward to remedy the situation before legal proceedings.
  • Legal action before the administrative court: In principle, you can only bring an action before the court once you have received a notice of objection in response to your objection.

Appeal

Forms: yes

Online procedure possible: partially

Written form required: no

Personal appearance required: no

What else should I know?

If you complete "Annex 2", you are not declaring that you are a critical infrastructure operator. Use "Annex 2" even if you believe that you do not fall under the regulations. The BSI will make the appropriate classification.

Further Information

Author

Forwarding service: Deep link to the original portal

The text was automatically translated based on the German content.

Technically approved by

Federal Ministry of the Interior, Building and Community

Professionally released on

20.07.2021

Source: Zuständigkeitsfinder Thüringen (Linie6PLus)

Competent Authority

Bundesamt für Sicherheit in der Informationstechnik (BSI) KRITIS-Büro

Postal address
Godesberger Allee 185-189
53175 Bonn, Stadt

Address
Godesberger Allee 87
53175 Bonn, Stadt
Telephone
+49 228 999582-6166
Fax
+49 228 99109582-6166
E-Mail
Contact us
Opening times

Monday: 08:00 to 15:30
Tuesday: 08:00 to 15:30
Wednesday: 08:00 to 15:30
Thursday: 08:00 to 15:30
Friday: 08:00 to 13:00