Topic starter
21/08/2026 4:48 pm
TL;DR: The Berlin January 2026 blackout left about 45,000 households and more than 2,200 businesses without power after an arson attack, KOBIL reports. KRITIS operators have to treat access control and protected operational data as continuity controls because physical sabotage can spread across services.
Editorial analysis by NHI Mgmt Group, based on content published by KOBIL: “The German KRITIS Act: Does it really protect?”.
By the numbers:
- More than 2,200 businesses were affected by the Berlin blackout, according to KOBIL.
Key questions
Q: Why do public infrastructure data and network maps increase resilience risk?
A: They reveal how services depend on one another, which helps an attacker or saboteur identify the most sensitive points of failure.
Q: What are the warning signs that KRITIS governance is failing?
A: Common signals include inconsistent rules across jurisdictions, broad sharing of operational documents, emergency access that is not tightly logged, and resilience plans that assume trust rather than verified identity.
Q: What breaks when critical infrastructure access controls are too broad?
A: Broad access makes operational data easier to misuse and recovery actions harder to contain.
Practitioner guidance
- Strengthen access control around operational infrastructure data Limit access to network diagrams, supply points, recovery runbooks, and maintenance data to named roles with explicit approval and review.
- Apply MFA to recovery and engineering access paths Require multi-factor authentication for privileged users, third-party support, and emergency access accounts that can alter critical systems.
- Classify infrastructure data by operational sensitivity Treat topology, dependency, and location data as attack-enabling information and protect it with encryption, segmentation, and least-privilege permissions.
Bottom line: The Berlin blackout shows that resilience depends on more than hardening physical assets, because access to operational data can widen the effect of sabotage.
Glossary terms: Critical Infrastructure Resilience, Operational Data Exposure, Emergency Access, Zero Trust
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 3 days ago by NHI Mgmt Group
21/08/2026 5:06 pm
Access control is now a resilience control, not a back-office control. The Berlin blackout shows that critical infrastructure risk is not limited to walls, fences, or network segmentation. When emergency operations depend on who can see, change, or share operational data, permissions become part of continuity planning. Practitioners should stop treating access governance as separate from KRITIS resilience and design it as a core control surface.
A question worth separating out:
Q: How should organisations balance emergency access with accountability in KRITIS environments?
A: They should predefine emergency access, bind it to strong authentication, and keep it auditable even under incident pressure. The goal is not to block response. It is to ensure that crisis access stays narrow, time-bound, and visible enough for post-incident review.
👉 Read our full editorial: Berlin blackout shows why KRITIS resilience still depends on access control