The Point: Approximately 1,300 CRITIS operators must register by July 17 under the CRITIS Umbrella Act and will thereby be subject to stricter cybersecurity and reporting obligations.
Critical infrastructure operators must register by July 17, 2024, in accordance with the CRITIS Umbrella Act. This affects approximately 1,300 organizations that will fall under expanded security requirements from this deadline onwards.
The CRITIS Umbrella Act (Act to Increase the Security of Critical Infrastructure) requires operators of critical infrastructure to register with the competent authority. The registration deadline ends on July 17, 2024. According to estimates, approximately 1,300 operators are affected by this obligation.
Registration entails expanded reporting obligations and cybersecurity requirements. Operators must henceforth report downtime and security incidents in their systems to the competent authorities. The Act aims to increase the resilience of critical infrastructure such as energy, water, telecommunications, and healthcare.
For CISOs, this means reviewing the current security status and ensuring that reporting processes and documentation are implemented by the deadline. Compliance with the registration deadline is mandatory.
Source: news.google.com · Published May 31, 2026
Lumi AI News — AI-assisted curation pursuant to Article 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.6.3.