• What are KIKS?

  KIKS are critical information and communication technology systems and data.

• Are there defined KIKS?

  Unlike in a few other European countries, there are no fixed KIKS in Germany. In Germany, a process-oriented approach by the respective operator is intended for identification.

• How are KIKS determined?

  As part of the preparation of the principles for the implementation of the DVO (EU) 2019/1583, a process-oriented approach for determining the KIKS of the respective operator was defined. This offers the advantage that the respective airport operators can determine the necessary KIKS in accordance with their operations.

• Are airports with security measures according to Regulation (EU) No 1254/2009 and only temporary security measures according to Regulation (EC) 300/2008 subject to the obligation to implement cyber security measures according to the DVO (EU) 2019/1583?

  As long as the airport implements even temporary security measures according to Regulation (EC) 300/2008, it falls under the obligation to implement cyber security measures according to DVO (EU) 2019/1583. According to the policy document, this includes the inclusion of cyber security measures for the critical information and communication technology systems and data as well as the registration for the BSI warning and reporting system.

FAQ about Aviation security