BSI note on the sector-specific security standard for water and wastewater.
BSI catalogue published on 10 September 2024 specifying criteria under Section 8a(1) and (1a) BSIG, including asset inventory, classification, network topology, and change management.
BSI guidance for manufacturers on the CRA timeline, risk assessment, conformity evidence, vulnerability handling, support periods, and SBOMs.
BSI implementation guidance covering documentation, roles, remote maintenance, segmentation, and protection of building-automation networks such as BACnet, KNX, and M-Bus.
BSI IT-Grundschutz module for integrating information security into the planning, implementation, and operation of building automation.
BSI security information from 2023 on documentation gaps, ownership, patch management, IT crossings, and undocumented remote maintenance in building automation and management.
BSI guidance on systems for attack detection (SzA) for critical infrastructure operators.
Official BSI collection of cyber resilience requirements for manufacturers and products, with separate parts for general requirements, SBOMs, and vulnerability reports.
Center for Internet Security publication for CIS Critical Security Controls v8.1.
CISA and international partner guidance on creating and maintaining a definitive view of operational technology architecture.
Joint agency guidance published in August 2025 on building an OT asset inventory with taxonomy, data management, and lifecycle maintenance.
Joint advisory from international cybersecurity authorities on protecting MSPs and their customers.
DKE overview of the IEC 62443 standard series for cybersecurity in industrial automation and control systems.
Dragos 2026 report on OT/ICS threats, ransomware, and industrial organizations.
Annual ENISA threat landscape report on observed cyber attack trends across the EU.
ENISA report on the European threat landscape and observed attack trends.
German ordinance defining critical infrastructure under the BSI Act in its current version.
German Federal Government article on the KRITIS umbrella act and cross-sector resilience requirements.
Evidence behind the claims
This index collects external publications, standards, authority pages, and technical resources that support statements on the website. Glossary sources remain linked directly on each glossary entry.