Implementation of an ISMS

secunet supported GELSENWASSER AG and its four companies in the introduction of a group-wide ISMS according to ISO/IEC 27001:2013 and successfully accompanied them through the initial certification audits from March to May 2018. In addition, Gelsenwasser Energienetze GmbH was audited and certified according to the IT security catalogue of the BNetzA. The implementation of the industry-specific security standard B3SWA in accordance with DVGW regulations was audited for the two waterworks and for the water distribution network. The certification and testing body is GUTcert from Berlin. The respective requirements are derived as follows:

• GELSENWASSER AG is an operator of critical infrastructures according to BSI-KritisV in the field of water supply with the Haltern waterworks and the downstream distribution network.
• As an energy network operator, Gelsenwasser Energienetze GmbH falls under Section 11 (1a) EnWG and thus under the IT security catalogue of the BNetzA for energy networks.
• Wassergewinnung Essen GmbH is the operator of a critical infrastructure in the area of water supply with the Verbundwasserwerk Essen in accordance with the BSI Criticality Ordinance.
• Westfälische Wasser- und Umweltanalytik GmbH is a subsidiary of GELSENWASSER AG and an important component in the quality assurance of the water supply.

After the initial certification, the ISMS of GELSENWASSER AG was continuously developed and optimised with the support of secunet and was successfully recertified by GUTcert in April 2021.