What happened?
With its Act-Now initiative, manufacturer Dallmeier aims to support operators of critical and important facilities in implementing the requirements of NIS2 and the CER Directive (Critical Entities Resilience). The focus is on resilient video security technology, cybersecurity, and supply chain protection. According to the company, Dallmeier has been developing video security technology "Made in Germany" since 1984 and is now specifically applying this experience to the current regulatory landscape surrounding NIS2 and CER.
The details
For a robust security strategy, Dallmeier defines three dimensions that must work together: physical resilience through high-performance video security, cyber resilience through "security by design" as well as an ISO 27001-certified information security management system, and geopolitical resilience through "Made in Germany" manufacturing and a secure supply chain. According to the company, it is precisely this interplay that is crucial for operators to holistically address the various requirements for a resilient video security infrastructure.
The new EU CER guidelines from July 2026 show just how concretely regulatory requirements now extend into technical practice. The control measure C30 contained therein formulates explicit requirements for video systems. These include, among others:
- real-time monitoring of critical areas
- continuous recording of security-relevant zones
- reliable time synchronization across all surveillance systems
- regular checks of recording status
- defined retention periods
In addition, there are requirements regarding system availability, secure backup power supply, and the forensic usability of recordings. This makes clear that video security in the context of NIS2 and CER can no longer be viewed in isolation, but must be part of a more comprehensive resilience concept.
Context
According to Dallmeier, the recent attacks on critical infrastructure illustrate why these regulatory requirements matter in practice. Operators of critical and important facilities will no longer need to keep only physical threats in view, but must simultaneously consider cyber risks, the security of their supply chains, and the continuous availability of their systems. The video security technology used is thus moving further into the focus of regulatory scrutiny, as it can simultaneously serve as a physical protection mechanism and a potential point of attack for cyber threats.
For operators, this means that the selection of video security components can no longer be based solely on traditional criteria such as image quality or coverage. Questions of cybersecurity, component origin, and supply chain security are gaining importance and must be factored into planning and operations.
Practical tips
The following points of action for operators and planners can be derived from the requirements described in the source text:
- Check whether the video systems in use fulfill the functions specified in control measure C30, such as real-time monitoring, continuous recording, and time synchronization.
- Define retention periods for recordings and regularly check recording status.
- Treat system availability and backup power supply as a fixed component of the security architecture.
- Plan cybersecurity for video technology from the outset, in the spirit of "security by design," rather than adding it on afterward.
- Include the origin and supply chain of the components used as part of the risk assessment.
- Make use of available webinars and practical guides to gain an overview of how NIS2 and CER affect your own video security infrastructure.
Outlook
As part of the Act-Now initiative, Dallmeier offers webinars designed to give operators an introduction to the topic. Some offerings examine the risks within the supply chain and provide an overview of the European regulatory framework as well as the three dimensions of resilience mentioned above. Other webinars focus specifically on NIS2 and the resulting requirements for video security. The company is making recordings of these webinars available as part of the initiative.
Jürgen Seiler, Head of Business Development at Dallmeier, sums up the company's approach: "We don't just sell cameras – we support our customers in complying with legal regulations and achieving holistic resilience." For operators of critical and important facilities, this makes clear that implementing NIS2 and CER is not a one-time project, but an ongoing task in which physical, digital, and organizational resilience must be considered together.
