BSI note on the sector-specific security standard for water and wastewater.
BSI catalogue published on 10 September 2024 specifying criteria under Section 8a(1) and (1a) BSIG, including asset inventory, classification, network topology, and change management.
BSI guidance for manufacturers on the CRA timeline, risk assessment, conformity evidence, vulnerability handling, support periods, and SBOMs.
BSI guidance on systems for attack detection (SzA) for critical infrastructure operators.
Official BSI collection of cyber resilience requirements for manufacturers and products, with separate parts for general requirements, SBOMs, and vulnerability reports.
Center for Internet Security publication for CIS Critical Security Controls v8.1.
CISA and international partner guidance on creating and maintaining a definitive view of operational technology architecture.
Joint agency guidance published in August 2025 on building an OT asset inventory with taxonomy, data management, and lifecycle maintenance.
Joint advisory from international cybersecurity authorities on protecting MSPs and their customers.
DKE overview of the IEC 62443 standard series for cybersecurity in industrial automation and control systems.
Dragos 2026 report on OT/ICS threats, ransomware, and industrial organizations.
Annual ENISA threat landscape report on observed cyber attack trends across the EU.
ENISA report on the European threat landscape and observed attack trends.
Official EUR-Lex text of Regulation (EU) 2024/2847 covering manufacturer obligations, essential cybersecurity requirements, technical documentation, conformity assessment, SBOMs, and CE marking.
Regulation (EU) 2024/2847 on horizontal cybersecurity requirements for products with digital elements.
Official EUR-Lex text of the EU Machinery Regulation covering conformity, CE marking, protection of compliance-relevant software and data, and the safety of control systems.
German ordinance defining critical infrastructure under the BSI Act in its current version.
German Federal Government article on the KRITIS umbrella act and cross-sector resilience requirements.
Evidence behind the claims
This index collects external publications, standards, authority pages, and technical resources that support statements on the website. Glossary sources remain linked directly on each glossary entry.