Critical infrastructures are organizations and facilities that are of great importance to the functioning of the community and whose failure or impairment would result in significant supply bottlenecks or threats to public safety.

As the operator of an energy supply network, you must report IT disruptions to the Federal Office for Information Security (BSI) without delay. This applies regardless of whether your energy supply network is part of the critical infrastructure.

To enable you to report faults, you must designate a contact point where you can be reached at any time. BSI will send various information to this address, for example IT security warnings and situation information.

Once you have registered a contact point with the BSI, you will receive comprehensive information to help you protect your critical infrastructures. In the event of a reportable incident, established and trustworthy reporting channels are available to you.

Among other things, you will receive

• Information on the reporting obligation,
• a reporting form,
• instructions on how to make a report.

This enables the BSI to ensure that

• incoming reports actually originate from operators of energy supply networks,
• operators are included in the group of recipients of BSI situation and warning information,
  • This means, among other things, that operators can be reached at any time and are able to receive cyber security warnings or situation information.
    • to receive them,
    • immediately view
    • and evaluate it.

As a rule, the BSI sends out information during normal business hours. In exceptional cases, urgent warnings can also be sent outside normal business hours, i.e. on public holidays, weekends or at night.