IndiciumIndicium
Log in
Industries KRITIS & Security

Personnel security that works with your Betriebsrat — not against it.

Critical infrastructure operators face a dual challenge: NIS2 and the KRITIS-Dachgesetz demand personnel security for critical roles, but German labor law demands works council involvement. Indicium bridges both — with screening that satisfies BSI expectations and process documentation that satisfies your Betriebsrat.

NIS2 Art. 21KRITIS-DachgesetzSÜG pre-screeningBSI / IT-SiG §8aBDSG §26§87 BetrVG
from €79 per report·120+ companies trust Indicium·3,000+ reports in the last two years·six-month satisfaction guarantee
See a sample report
01 Where KRITIS HR teams actually get stuck

The regulator wants screening. The Betriebsrat wants co-determination.

a
NIS2 personnel security obligations
NIS2 Art. 21 requires security measures including personnel screening for roles with access to critical systems. The KRITIS-Dachgesetz translates this into German law. But which roles, which depth, and which legal basis — that is your call, and it needs documentation.
b
Works council co-determination
§87 Abs. 1 Nr. 6 BetrVG requires works council approval for technical monitoring devices. Without a Betriebsvereinbarung, employee screening is blocked. You need a tool that comes with process documentation, not just a dashboard.
c
SÜG pre-screening efficiency
The official security clearance (SÜG) takes months and costs fees. A pre-screening that surfaces disqualifying findings before the official procedure starts saves time, money, and reputation — especially when a candidate would obviously not pass.
02 Regulatory mapping

Your framework, our documentation.

Every report is built so its documentation slots directly into your ISMS and your BSI audit file.

FrameworkWhat it requiresHow Indicium documents it
NIS2 Art. 21Personnel security measures for critical rolesRole-based screening with documented risk assessment, dated sources, audit trail
KRITIS-DachgesetzImplementation of NIS2 in German law for KRITIS operatorsRegulatory mapping in report annex, BSI-audit-ready documentation
SÜGOfficial security clearance procedure (sovereign)Pre-screening layer: surfaces disqualifying findings before the official procedure begins
BSI / IT-SiG §8aKRITIS security standards and oversightReport compatible with ISMS documentation, BSI-audit-ready format
BDSG §26Legal basis for employee data processingBerechtigtes Interesse assessment, pre-employment vs. employee screening differentiation
§87 BetrVGWorks council co-determination for technical monitoringProcess documentation and template Betriebsvereinbarung for works council negotiation

The honest boundary: Indicium does not replace the sovereign SÜG procedure. It is the pre-screening layer that prevents obvious failures from reaching the official process — saving months and fees. The final security clearance decision remains with the government authority.

03 Works council support

A tool your Betriebsrat can say yes to.

The biggest blocker for KRITIS personnel screening is not the technology — it is the works council. Indicium comes with the documentation that makes the negotiation productive instead of adversarial.

a
Template Betriebsvereinbarung
A model works agreement covering scope, legal basis, data categories, employee rights, and retention — ready to adapt to your company.
b
Process documentation
Step-by-step description of what is checked, which sources are used, who sees the results, and how long data is retained — for the Betriebsrat and for your DPO.
c
Pre-employment vs. employee screening
Clear differentiation: pre-employment screening of candidates (berechtigtes Interesse, no works council co-determination) vs. employee screening (requires Betriebsvereinbarung). Social media screening for employees only under works-council agreements.
04 Matching depth to the role

From routine role screening to analyst-led escalation.

a
Software-Report
Seven check categories in parallel, from €79 — routine role screening, resolved in under 30 minutes for 80% of cases.
b
Hybrid
Software depth plus documented human review — for roles with elevated security clearance requirements.
c
Boutique
Fully analyst-led investigation for high-stakes cases, multi-jurisdiction backgrounds, or SÜG pre-screening of candidates with complex histories.
FAQ What your Betriebsrat and your BSI contact will ask
Does Indicium replace the official SÜG security clearance?+
No. The official security clearance under the SÜG is a sovereign procedure conducted by government authorities. Indicium serves as a fast, low-cost pre-screening layer: it surfaces disqualifying findings before the lengthy and fee-based official procedure begins. This saves months and fees when a candidate would obviously not pass.
How does Indicium work with our works council (Betriebsrat)?+
Employee screening in Germany requires works council involvement under §87 Abs. 1 Nr. 6 BetrVG when the tool constitutes a technical monitoring device. Indicium supports this with process documentation and template works agreements (Betriebsvereinbarung). We recommend consulting your works council before implementing employee screening. Pre-employment screening of candidates is generally not subject to works council co-determination.
Is social media screening legal for our employees?+
Social media screening of existing employees requires a works agreement and a legal basis under BDSG §26. Indicium offers social media screening for pre-employment screening (candidates) by default, and for existing employees under works-council agreements only. The legal basis for pre-employment screening is typically berechtigtes Interesse (Art. 6(1)(f) GDPR).
Where is our data hosted — and is sovereign deployment available?+
Data is hosted on AWS and Google Cloud European infrastructure. For KRITIS operators with stricter requirements, sovereign deployment options (e.g., Telekom Cloud) are available on request. We also carry comprehensive cyber insurance coverage.

This page provides general information about Indicium's services and the regulatory frameworks named above (NIS2, KRITIS-Dachgesetz, SÜG, BSI/IT-SiG, BDSG, BetrVG). It does not constitute legal or regulatory advice and does not replace an assessment by your own counsel, your works council, or your BSI contact for your specific case. Regulatory mapping reflects our understanding of the cited frameworks and does not guarantee a particular compliance outcome or supervisory acceptance.

Personnel security that works with your Betriebsrat.

Software for the repeatable, people for the decisive, made in Europe.

Book a demo See a sample report