Security by design and NIS2

NIS2 widened the circle of organisations with binding cybersecurity duties, and Germany's implementing act has been in force since December 2025, with registration at the BSI. Energy is squarely in scope. Compliance after the fact is expensive, and it rarely produces systems that are secure in operation.

We bring security into the architecture: network segmentation between IT and OT, identity and access design, secure development practice and supplier risk management. We align the work with ISO/IEC 27001, IEC 62443 for industrial control systems and BSI IT-Grundschutz where it applies, and we prepare the documentation that supervisors will ask for.

Typical deliverables

• NIS2 applicability and gap assessment
• Security architecture for IT/OT integration
• Security requirements embedded in specifications and tenders
• Information security management system documentation aligned with ISO/IEC 27001