The operator has to carry out the risk analysis on its own responsibility (Section 30 BSIG, Section 12 KRITIS umbrella act). You can use internal resources or bring in external advisers such as TÜV, specialist consultants or auditors. CIBORIUS Security does not carry out risk analyses — we support you in implementing the physical security measures your risk analysis calls for. That keeps the assessment independent.
FAQ