Lünendonk: KRITIS Framework Act Makes Facility Management a Key Factor in Resilience

April 15, 2026

  • New legal requirements increase pressure on operators of critical infrastructure
  • Facility Management takes centre stage in security and resilience
  • New Lünendonk white paper “KRITIS Resilience through Partnership” now available

With the recently passed KRITIS umbrella law, the requirements for the operation of critical infrastructure have become significantly stricter. As a result, facility management is evolving from an operational to a strategic management task. For critical infrastructure companies, it is becoming a key instrument for ensuring resilience, business continuity and regulatory compliance.

The new Lünendonk white paper “KRITIS Resilience through Partnership – How Facility Management Protects Critical Infrastructure” examines the implications of the KRITIS umbrella law for critical infrastructure companies. It outlines the operational measures required, how companies can implement the increased requirements in a structured manner, and the role facility service providers play in this process. The white paper in German language is now available to download free of charge at www.luenendonk.de.

Facility management is becoming a strategic management task

To strengthen the protection of critical infrastructure against threats such as natural disasters, acts of sabotage or the failure of supply systems, the KRITIS umbrella law increases the requirements for its physical resilience. The necessary measures fall under the direct responsibility of facility management. As a result, it is evolving from a purely operational service into a strategic function for security and business continuity, thereby also becoming a management responsibility. The success of facility management is no longer measured solely by service quality, but by the demonstrable ability to ensure business continuity even in the event of a crisis and to meet legal requirements. Qualified staff, innovative strength and operational excellence thus become key quality criteria for external partners.

Facility service providers support companies in meeting rising requirements

The new legal requirements oblige companies classified as critical infrastructure to adopt a proactive approach to risk management: they must systematically analyse potential hazards, plan resilience measures and demonstrate their effectiveness to the authorities. Depending on the sector, risk analysis poses complex technical and organisational challenges: increasing fire risks from incorrectly disposed batteries, for example, are forcing operators of waste disposal and recycling facilities to adapt their fire safety plans.Shortcomings in access control and perimeter surveillance expose logistics centres to the risk of acts of sabotage that could bring entire supply chains to a standstill.

“With the KRITIS umbrella law, the choice of facility service partner becomes a strategic decision for the resilience of critical infrastructure. In addition to scope of services and expertise, the focus is now primarily on innovation and future-proofing,” explains Stefan Schubert, Consultant at Lünendonk & Hossenfelder. “Reactive building operations are no longer sufficient – facility management must systematically identify risks, anticipate failure scenarios and demonstrably implement protective measures.”

Reference

The Lünendonk white paper “KRITIS Resilience through Partnership – How Facility Management Protects Critical Infrastructure” was produced in technical collaboration with Strabag PFS. It is now available to download free of charge at www.luenendonk.de.

Related Articles

TeleTrusT criticises draft CRA implementing legislation

Context: What the Cyber Resilience Act actually changes in the EU The Cyber Resilience Act (CRA) establishes, for the first time, a uniform EU-wide framework that sets out mandatory cybersecurity requirements for hardware and software (‘products with digital...

Share This