+49 (911) 80 10 30

Give us a call or have us call you back!

Simply leave a message with your callback appointment

Your Name *

Your phone number *

Callback date *

Callback time *

Your request *

In order to process your request, it is necessary to process the data you provide. This means that by submitting the contact form, you consent to your data being processed (see Privacy Policy). You can object to the processing of your data at any time.

* All fields marked with an asterisk are mandatory fields.
Send a message

Your Name *

Your email *

Your phone number

Your request *

In order to process your request, it is necessary to process the data you provide. This means that by submitting the contact form, you consent to your data being processed (see Privacy Policy). You can object to the processing of your data at any time.*

* All fields marked with an asterisk are mandatory fields.
Social Media

Share page

SC160: Requirements for CRITIS-ISMS and Additional Audit Procedure Competence According to BSIG for CRITIS Operators

Training: Governance, Risk & Compliance - Security - Certification

Participants acquire the specialized audit procedure competency for § 8a BSIG that auditors and auditing bodies must demonstrate for audits at KRITIS operators. The new requirements effective from 01.04.2025 with focus on the NIS2UmsuCG are covered. The successfully completed examination serves as official competency certification with the BSI™ and qualifies for audits in KRITIS environments.

Appointment selection

Appointments in German language (2)


Online event	2026-06-22 \| 09:00 am	2026-06-24 \| 04:00 pm	Online
Hybrid event	2026-10-12 \| 10:00 am	2026-10-14 \| 05:00 pm	Nürnberg

Possible course languages: German

Request prefered appointment period:

Your Name *

Your email *

Your phone number

Preferred period from *

Preferred period to *

Number of participants *

Your message

* All fields marked with an asterisk are mandatory fields.

Online event

Start: 2026-06-22 | 09:00 am

End: 2026-06-24 | 04:00 pm

Location: Online

Price: 2.250,00 € plus VAT.

Hybrid event

Start: 2026-10-12 | 10:00 am

End: 2026-10-14 | 05:00 pm

Location: Nürnberg

Price: 2.250,00 € plus VAT.

Request prefered appointment period:

Your Name *

Your email *

Your phone number

Preferred period from *

Preferred period to *

Number of participants *

Your message

* All fields marked with an asterisk are mandatory fields.

Agenda:

The course includes the following topics:
- Module 0: Introduction: Presentation of BSI™, critical infrastructures
- Module 1: IT-SiG, NIS2UmsuCG, BSIG: Deadlines, information system and reporting obligations/channels, forms, state of the art
- Module 2: BSI™-KritisV: Fundamentals, structure and content, annexes, facility categories and threshold values, consequences
- Module 3: Audit fundamentals: Legal foundations, audit topics from guidance document B3S, variants for audit procedures without B3S
- Module 4: Audit process: Legal regulations on evidence, evidence process, operator tasks, qualification and tasks of audit team and auditing body
Examination: 60 minutes (multiple choice)
The course is oriented on the official module contents of the 3-day BSI™ basic course and the examination questions of BSI™.
The 3-day qSkills™ course provides adequate space for in-depth discussions of the complex subject matter.
BSI™ does not issue official certificates for auditors or auditing bodies regarding audit competence §8a BSIG! Participants receive after passed examination from qSkills™ a confirmation with reference to the course instructor and the course modules. Auditors and auditing bodies can hereby demonstrate their competence sufficiently to BSI™.

Objectives:

Participants acquire the "special audit procedure competence for §8a BSIG" and receive an overview of the relevant laws, audit topics, and requirements for auditors and auditing bodies, audit processes, as well as necessary evidence and forms. The course does not include how the orientation guide for B3S or a B3S can be implemented in organizations or which measures correspond to the state of the art. The course does not offer legal advice on laws and regulations, e.g., to what extent an operator and its facilities fall under the BSI™-KritisV in individual cases. It neither replaces legal consultation nor inquiries with the BSI™.

Target audience:

The course SC160 Requirements for KRITIS-ISMS and additional audit procedure competence according to BSIG for KRITIS operators is primarily targeted at auditors and employees of auditing bodies.
All members of an audit team and at least one employee of an auditing body must provide proof of competence.
For employees of KRITIS operators (information security officers, internal auditors etc.), whose organization must be audited according to §8a BSIG, the course SC160 Requirements for KRITIS-ISMS and additional audit procedure competence according to BSIG for KRITIS operators provides important insights into audit processes and expected audit topics (see course objectives).
The course is not focused on specific KRITIS sectors or industry-specific security standards (B3S).

Prerequisites:

Knowledge in the area of ISMS (e.g., 27001, IT-Grundschutz) or comparable management systems. Participants should have initial auditor experience and basic knowledge of the BSI™ Act in the IT Security Act and the BSI™ Critical Infrastructure Ordinance.

Description:

The participants of the course SC160 Requirements for KRITIS-ISMS and additional audit procedure competence according to BSIG for KRITIS operators receive the "special audit procedure competence for §8a BSIG". This must be demonstrated for auditors and auditing bodies that conduct audits at Critical Infrastructures (KRITIS) that operate a critical facility according to the BSI™-Kritisverordnung.

From 01.04.2025, all KRITIS operators must fulfill comprehensive new requirements – the course particularly considers the aspects from the NIS2UmsuCG.

The participation and the successfully completed examination serve as proof of your competence at the Federal Office for Information Security (BSI™).