Darktrace: Enabling German Critical Infrastructure Security Under IT-Sicherheitsgesetz 2.0.pdf

## IT Cybersecurity Act 2.0: Darktrace Compliance Summary

This document outlines how Darktrace technology assists providers of critical infrastructure (KRITIS) in meeting the requirements of Germany's updated IT-Sicherheitsgesetz 2.0 (IT Security Act 2.0).

Key Points:

Compliance Requirements:

The German IT Security Act 2.0 mandates that KRITIS providers implement systems to detect cyberattacks, with reporting by May 1, 2023. Darktrace offers a solution for achieving the "must," "should," and "can" criteria outlined in the BSI Orientierungshilfe (Guidance for Implementation of Security Systems).

Darktrace Capabilities:

Machine Learning & AI: Analyzes network traffic patterns to identify anomalies indicative of threats.
Early Detection: Autonomously defends against various threat types (malware, insider threats, IoT hacks) at the earliest stage of an attack.
Unified Solution: Provides a single user interface combining insights from IT and Operational Technology (OT) networks.
Scalability & Flexibility: Easily scales to monitor thousands of devices and adapts to evolving network structures.
AI Analyst: Darktrace's AI performs advanced threat investigations, learning from expert analysts' training data.

Compliance Support:

Darktrace directly addresses the following compliance requirements:

Logging (MUSS): Captures and stores all relevant logging data for effective attack detection at system or network level. Uses Deep Packet Inspection (DPI) to analyze IP traffic metadata.
Planning (SOLL):

Enables a step-by-step implementation of logging with adequate visibility within a reasonable timeframe.
Identifies critical systems and their log data requirements.
Adapts existing logging infrastructure or supplements it as needed.
Data Handling (KANN): Provides anonymization/pseudonymization capabilities for handling potentially sensitive data, adhering to data protection regulations.

Implementation:

Darktrace can automatically create an inventory of network systems and classify them based on traffic patterns.
* Sizing of Darktrace sensors is based on representative system data, considering factors like device count, bandwidth, and connections per minute.