CER / ZKI-1
Directive (EU) 2022/2557 (CER) and the Critical Infrastructure Act (ZKI-1)
The CER Directive strengthens the physical resilience of critical entities across eleven sectors. In Slovenia it is transposed by the Critical Infrastructure Act (ZKI-1), in force since December 2024.
Who it applies to
- Public and private entities designated by Member States as critical entities.
- Eleven sectors: energy, transport, banking, financial market infrastructure, health, drinking water, wastewater, digital infrastructure, public administration, space and food.
Key obligations
- An all-hazards risk assessment.
- Appropriate and proportionate technical, security and organizational resilience measures — prevention, physical protection, incident response, recovery, personnel security and awareness.
- Incident notification to competent authorities — initial notification within 24 hours.
- Resilience plans and designated contact persons.
Penalties
Under ZKI-1, fines for legal entities range from EUR 4,000 to EUR 12,000, and for responsible persons from EUR 600 to EUR 1,200, depending on the infringement.
Status in Slovenia
ZKI-1 was published in Official Gazette RS No. 102/24 and expands the framework from eight to eleven sectors. The single point of contact is the ministry responsible for defence.
Important notice
This is general information, not legal advice. The content is verified against primary sources (EUR-Lex, Official Gazette RS), but regulations change and their application depends on each organization's circumstances. Consult a legal professional for a binding assessment.
Sources and standards
Ready to strengthen security across your organization?
Contact us to see how our turnkey solutions can build a safer, more resilient organization.