This year’s KRITIS Praxis Forum celebrates a small anniversary: It is the tenth event around Information Security Management Systems (ISMS) and IT security in critical infrastructures. For all operators of these critical infrastructures (KRITIS), the ausecus GmbH event is a good opportunity to learn about new security technologies. In addition, it is possible to exchange information with experts and other companies about suitable solutions for practical applications. As a result, many municipal companies, water and energy suppliers, and public transport operators are expected to attend again this year. There are workshops on important topics such as ISO certification (ISO 27001:2022), KRITIS umbrella law or cyber defense. In addition, there will be expert presentations from the field as well as from authorities such as the Federal Office for Information Security (BSI), the Federal Network Agency (BNetzA) and the Federal Criminal Police Office (BKA). Industry meetings on energy supply, water supply and disposal, and power generation also provide an opportunity to discuss current key topics.
SECUINFRA GmbH is represented twice at this year’s KRITIS Praxis Forum. For example, two of our cyber defense experts (Evgen Blohm and Marius Genheimer) will offer a workshop on incident response. Specifically, this involves a case study in which an industrial system is under attack. The two security specialists show what to do in the event of such an OT incident and how to counteract an infection. “Especially operators of critical infrastructure should prepare for an emergency,” Blohm promotes the workshop. “The KRITIS Praxis Forum is a great opportunity to interact with experts and learn how such attacks can play out and how to arm yourself.” SECUINFRA’s second contribution is a presentation by Marius Genheimer: “Extortion without Ransomware – Handling a ‘BianLian’ Security Incident”. Here, all interested parties can understand how the attacker group “BianLian” was able to penetrate a network on the basis of an incident – anonymized, of course. The security expert recommends the lecture to anyone who wants to take a look behind the scenes: “We have been following the group’s activities for some time now. KRITIS operators in particular can see where the dangers lurk with this concrete example.”
The 10th KRITIS Praxis Forum is organized by ausecus GmbH and will take place on 11. and October 12, 2023 at the Congress Centrum Würzburg. It consists of numerous parallel workshops as well as technical presentations by authorities and security experts.
