Energy and utility infrastructures form the backbone of modern society. Power generation plants, electricity grids, gas networks and water supply systems are essential for the functioning of hospitals, transport, communications and industry. Disruptions caused by fire, technical failure, cyber incidents or malicious acts can have widespread and long-lasting consequences. Under the Critical Entities Resilience framework, operators are required to strengthen prevention, protection and recovery measures. Fire detection, fire suppression, access control, perimeter protection and alarm transmission systems are fundamental to ensuring continuity of supply and protecting critical assets and personnel.

 

Energy Sector 

 

EU Actions & Requirements 

  • Risk assessments and resilience planning for entities involved in electricity, oil, gas and hydrogen supply, including transmission, distribution, storage, and market operations under the CER Directive. 
  • Integration of cybersecurity risk management and incident reporting under NIS2 for energy operators. 
  • Stress tests and coordinated preparedness exercises at EU level – particularly for cross-border grid and supply chain disruptions. 

Key Focus 

  • Preventive measures against natural hazards, sabotage, insider threats, and cyber attacks. 
  • Coordination among Member States and with EU institutions for cross-border energy resilience. 

 

Water (drinking and wastewater) 

 

EU actions & requirements 

  • Drinking water and wastewater infrastructure are included as core sectors in CER and NIS2 scopes. 
  • Member States must carry out risk identification and resilience enhancing measures to protect water supplies. 

Key focus 

  • Maintaining safe and continuous provision of water services during crises. 
  • Strengthening physical and digital protections for water utilities.