Identify vulnerabilities, assess risks, prioritize protective measures
A systematic vulnerability assessment and risk analysis forms the foundation for effective protective measures in critical infrastructures.
Vulnerability assessment and risk analysis is a central component of KRITIS compliance. Operators of critical infrastructures must take appropriate precautions under Section 8a BSIG. This includes systematic identification of vulnerabilities in IT and OT systems as well as assessment of the resulting risks to service continuity.
We conduct a comprehensive vulnerability assessment and risk analysis covering all aspects of your critical infrastructure. From asset inventory through technical scans to threat modelling, we deliver concrete recommendations for improving your security posture.
2 service modules
Bookable individually or as an end-to-end programme.
Complete capture and classification of all critical assets and systems as the foundation for vulnerability analysis.
Comprehensive technical analysis to identify vulnerabilities in IT and OT systems.
5 phases
We conduct a systematic and comprehensive vulnerability analysis that considers both technical and organizational aspects.
Your contact
Sarah Richter
Head of Information Security, Cyber Security
10+ years of experience, CISA, CISM, Lead Auditor, DORA, NIS2, BCM, Cyber and Information Security
From July 2026, the KRITIS Umbrella Act tightens requirements for physical security. Combined with NIS2, operators must systematically analyse and address both cyber and physical risks.
Our clients trust our expertise in digital transformation, compliance, and risk management
Schedule a strategic consultation with our experts now
30 Minutes • Non-binding • Immediately available
Direct hotline for decision-makers
Strategic inquiries via email
For complex inquiries or if you want to provide specific information in advance