IT security status of German energy providers : technical report

As part of the research project “Secure information networks of small- and medium-sized
energy providers” (SIDATE), a survey about the IT security status of German energy
providers was conducted. The project itself is focused on the IT security of small- and
medium-sized energy providers.
In August 2016, 881 companies listed by the Federal Network Agency were approached.
Between, September 1st 2016 and October 15th 2016, 61 (6.9%) of the companies replied.
The questionnaire focuses on the implementation of the regulatory requirements and on the
implementation of an information security management system (ISMS). Additionally,
questions about the energy control system, the network structure, processes, organisational
structures, and the IT department were asked. Questions were asked in German, so all
questions and answers are translated for this report.