G4-EUS-DMA Disaster/Emergency Planning and Response
As an operator of critical infrastructure, 50Hertz isrequired to ensure information security under the IT-SiG [“IT-Sicherheitsgesetz”: IT Security Act]. Information must be processed, stored and communicated such that the availability, confidentiality and integrity of the information and the systems are adequately ensured.
To this end, an information security management system was introduced in 2017 and certified in 2018 in accordance with ISO27001. This established security process ensures that IT risks are systematically identified and addressed. In particular, security alerts and warnings that are issued by the German Federal Office for Security Technology (BSI) are recorded and evaluated as part of this process. If required, necessary protective measures are derived and implemented. In the reporting year, no targeted cyberattacks on 50Hertz were registered and no damage from information security incidents was recorded. 50Hertz employees, as well as temporary and external employees, participated in an online training session on information security in2018.
In January 2018, 50Hertz received the ISO 27001 information security management system certification, as a result of which 50Hertz has to fulfil its obligation as an operator of critical infrastructure on the basis of the IT security catalogue of the Federal Network Agency. In November 2018, the repeat audit was performed.
For 50Hertz, security goes beyond its corporate boundaries. Therefore, both internal and external stakeholders receive training in crisis management and communication in the form of regular crisis team exercises, among other things. As a result of this, not only existing structures, processes and reporting channels are evaluated and continuously improved, but the crisis team participants and employees also receive intensive training on how to deal with unexpected events under special stresses and quickly make appropriate decisions to manage crises. These and further measures aim to continuously and holistically increase the resilience of 50Hertz.