• Can airports extend their BSI IT-Grundschutz, which has already been introduced and certified in the context of regulation as critical infrastructure (§ 8a BSIG), to the area of cyber security measures in the course of DVO (EU) 2019/1583?

  Provided that the measures of the IT-Grundschutz are also applied to the identified KIKS, these can also be taken into account for the cyber security measures.
  See also: Topic dual regulation KRITIS / cyber air security.

• What dates/steps apply to the implementation of the phased plan?

  From 1.1.2022, operators must prove that they are working on the implementation of basic security according to BSI IT-Grundschutz. The implementation of basic IT-Grundschutz assurance must be completed immediately.

FAQ about Aviation security