The Second Act on Increasing the Security of IT Systems (German IT Security Act 2.0) granted the BSI new competences. Among other things, the certification obligation for critical components in 5G mobile networks was introduced. Accordingly, the 5G risk analysis provides a basis for the definition of critical components in 5G networks and supports the implementation of current legislation.