Data centers · KRITIS

Critical infrastructure security for data centers and their construction sites

Data centers count as critical digital infrastructure. Physical resilience therefore starts on the construction site, not only in operation. We deliver the part that happens on site.

KRITIS Umbrella Act · Data centers · Construction sites

KRITIS Umbrella Act

What applies since March 2026

The act implements EU Directive 2022/2557 and adds the physical side to NIS2. Data centers are covered as digital infrastructure.

Registration

Critical facilities are registered with the federal civil protection office (BBK).

Risk assessment

Risks assessed on the basis of the national risk assessment.

Resilience measures

Technical, organisational and personnel – including physical security.

Reporting duty

Significant incidents must be reported.

Our contribution

The operational part of your resilience

Access & perimeter

Gates, badge and visitor management, vehicle checks, patrols – on the construction site and in operation.

Vetted staff

Sec. 34a GewO, police clearance, NDA – own staff only.

Fire safety & emergency

Fire watch, first aiders, site paramedics, rehearsed emergency procedures.

Evidence

Digital guard log and reports as a basis for audits.

Data center experience

40+ data center projects in construction and operation.

Training

Fire safety, de-escalation and our own data center induction.

FAQ

Frequently asked questions

What does the KRITIS Umbrella Act require from operators?

Since 17 March 2026, operators of critical facilities must, among other things, register their facilities, carry out risk assessments, implement resilience measures – including physical and personnel security – and report significant incidents.

How does a security provider support implementation?

With the operational part on site: access control, perimeter protection, vetted staff, emergency procedures and documentation that serves as evidence.

Do you use your own staff?

Yes. We deploy our own, directly employed staff – fixed teams instead of changing floaters – an important factor for personnel security.

Why already on the construction site?

Whoever later operates a critical facility must be able to show its risks and measures. Who had access to plant rooms, plans and systems during construction is part of that picture. Proper access control and complete records from the first construction phase lay the groundwork.

Contact

Your facility, our concept

We assess your facility on site and show which measures we can take over.

Phone: +49 (0) 611 950 123 20