This section includes an excerpt from the orientation guide to documentation of compliance pursuant to Section 8a (3) of the BSI-Act.

Acquiring additional audit process competence

By additional audit process competence for Section 8a of the BSI-Act, we mean knowledge of the characteristics of a KRITIS-specific audit within the area of Section 8a of the BSI-Act. In particular, this concerns the evaluation of the scope, the protection of security of supply, restrictions in risk treatment, the consideration of the 'state of the art' and other special aspects that are KRITIS-specific.

This competence can be acquired in a separate training course that deals with the special aspects and requirements of an audit in line with Section 8a of the BSI-Act. This training is not an accreditation, recognition or certification of an auditor; it is a recommended additional qualification.