Compliance with critical-infra regulations, ISO 27001 preparation, redundant backups, secure networks.
Anyone operating critical infrastructure — water, power, telecommunications, logistics — has had hard obligations since the critical-infra regulation: implement minimum standards, report security incidents, pass regular audits. We build IT infrastructure that technically fulfils these obligations — and creates the preconditions for ISO 27001 certification if you need it.
What sets critical-infra IT apart from normal IT
For normal companies an hour of server outage is annoying. For a waterworks or power utility it can affect supply to thousands of households. Therefore: high availability is mandatory (cluster setup, automatic failover), backup must be ransomware-immune (Object First Ootbi), networks must be segmented (OT/IT separation, firewalls between zones), logging and forensics must work (centralised log management, indicator detection).
ISO 27001 is not a paper tiger but a process
We prepare you for ISO 27001 certification by implementing the technical measures the standard requires — not through paper compliance but through real technical hardening. In a later audit you have not just the documents but the reality that matches the documents.
Realistic threat models
Critical-infra attacks aren’t hypothetical: ransomware in hospitals, hacked waterworks (Oldsmar 2021), successful attacks on municipal utilities. We don’t start from theory but from what actually happens. Isolate backup servers from the production network. Secure admin access with MFA. Write and rehearse emergency runbooks.
Impressions
Where we typically operate
Water supply
Municipal utilities, water boards
OT/IT separation, hardened SCADA servers, isolated backup, UPS for IT.
Energy supply
Small municipal utilities
Secure remote maintenance of substations, logging, redundant backbone connection.
Logistics
Hubs, distribution
High-availability warehouse IT, secure wireless for scanners, backup with short RTO.
Telecommunications
Local providers
Carrier-grade network setup, BGP routing hardening, DDoS mitigation.
Our service package for critical-infra operators
- IT audit per BSI-Grundschutz or ISO 27001 (preparation for certification)
- OT/IT network segmentation with dedicated firewalls
- Veeam backup with Object First Ootbi for ransomware-immune backup
- Proxmox cluster with high availability and automatic failover
- Centralised log management and security monitoring
- Emergency runbooks, regular tabletop exercises, incident response plan
Does this solution fit your needs?
Send us a brief description of what you want to protect or secure – we’ll get back to you with an honest assessment and a non-binding proposal.
Email info@grass-security.solutions
Service tickets: ticket@grass-security.solutions
Imprint · Privacy · Terms
© Graß Security Solutions Surveillance and more · Mosbach