Compliance
KRITIS evidence, on time, every cycle
Clarity on your obligations as a critical infrastructure operator, a structured gap analysis against the state of the art, and support through the Section 8a audit cycle.
Challenge
Why the Section 8a audit often becomes a scramble
The audit cycle is set by law, but preparation for it is often reactive rather than structured.
Without structured preparation
- Evidence is pulled together only shortly before the audit date
- High time pressure and resource strain in the final weeks before the audit
- Protection gaps often only surface during the audit itself
- Coordination with the auditing body starts late and under time pressure
- Proving 'state of the art' is hard without ongoing documentation
With Decanos
- Evidence builds up continuously and is available at any time
- Predictable lead time across the full two-year cycle
- Gaps are identified early through a structured gap analysis
- Structured preparation and support coordinating with the auditing body
- Continuously documented and backed by current evidence
Benefits
Why choose Decanos for your KRITIS audit
Deliverables
What you get
KRITIS classification and threshold analysis
Gap analysis against the state of the art
Prioritized action plan
Documentation of technical and organizational measures
Comparison against sector-specific security standards (B3S)
Support through the Section 8a evidence submission
Preparation for review by the BSI
Lasting processes for future audit cycles
KRITIS Audit under Section 8a BSIG