Security as a solution – not as a product

[Full version of the interview from the supplement “Public Security”, DIE WELT, March 24, 2026]

Critical infrastructures, complex building structures, and new requirements for access are noticeably changing the security sector. Roberto Creutziger, Head of Sales GEMOS at BKS GmbH, and Dirk Wellsow, Product Manager for electronic locking systems, talk about the growing interconnection of physical security and IT solutions, the role of integrated systems—and why security today goes far beyond individual components.

The protection of critical infrastructure has been a topic not only since the events in Berlin and the adoption of the KRITIS umbrella law. Where do you see the greatest challenges for companies and institutions in concrete terms?

Creutziger: From my point of view, several challenges are currently converging. The most important is that physical security and IT security can no longer be considered separately. Under the KRITIS umbrella law, physical risks and cyber defense are moving much closer together. This fundamentally changes the requirements for companies and institutions.

Added to this is the need for investment. In the KRITIS environment, we often talk not only about individual buildings but about extensive facilities, for example in energy or water supply. These areas must be comprehensively secured, including perimeter protection, video technology, and other security systems. This is demanding both organizationally and financially.

Furthermore, additional administrative obligations, new reporting chains, regulatory requirements, and liability issues arise at the management level. At the same time, qualified personnel in this area are hard to find. This is particularly challenging for companies that have not previously expected to fall under such requirements. This does not only affect large operators, but also, for example, many utilities or municipal companies that now have to deal with topics that have not previously been central—challenges that we at BKS have been dealing with for years.

The requirements for modern building management are becoming increasingly complex. What questions, concerns, and challenges are your customers currently bringing to you?

Creutziger: Many questions arise directly from this new situation. Customers mainly want to know how physical security and IT security can be practically combined. In many companies, these are still separate areas—on one side plant security and security officers, on the other side IT. Today, these areas must work more closely together, and this creates a great need for clarification.

Accordingly, cybersecurity is also an important topic. Our system operates within the IT landscape of our customers. Therefore, we are asked very specifically how we ensure encrypted communication, how we at BKS deal with cyber risks, and what contribution we can make at the system level.

Another focus is documentation obligations. Many companies are looking for solutions that allow processes and security-relevant events to be properly documented without having to hire additional staff. At the same time, we often experience that we are perceived as a holistic contact for security—for example, with questions about the resilience of buildings, autonomy, or emergency power supply. Not all of this is solved directly by our GEMOS system, but the expectation is clear: security must be considered as a whole. And this is exactly the approach pursued by our building management system GEMOS.

Heterogeneous system landscapes are an obstacle in all areas and industries. How does GEMOS specifically address this to overcome system breaks, and how do KRITIS operators benefit?

Creutziger: A key point is that GEMOS was designed to be manufacturer-neutral from the outset. We do not focus only on individual brands or products from our own company, but integrate different trades and systems—from fire detection technology, video surveillance camera, and access control system to building management technology or evacuation systems .

Our know-how and the large number of already implemented interfaces avoid the so-called system breaks in installations. Instead of working with several interfaces, users receive a unified, intuitive user interface where information converges and processes are presented in a structured way. This is a great advantage, especially in critical situations, because you do not have to switch between different systems and reorient yourself each time.

This is particularly relevant for KRITIS operators. In an emergency, it is about acting quickly, in a structured manner, and without errors. GEMOS supports this with site plans, automated workflows, and clear chains of action. At the same time, the system maps the organization of the respective company, i.e., precisely those processes and responsibilities that are crucial in the event of an incident. In this way, we create an integrated framework for action from a multitude of individual systems.

Such interplay and the necessary integration sound complex. What does a typical process from research to implementation look like? Is such a solution only for large corporations? And how far is BKS involved?

Creutziger: Of course, this is not a plug-and-play project. Such solutions require thorough analysis, technical know-how, and a lot of experience. This is exactly where we at BKS are intensively involved. Together with the customer, we first look at the existing system landscape, coordinate with other partners, and clarify which interfaces, standards, and technical conditions are present.

Equally important is the organizational part. We need to understand how the company works, which processes are triggered in the event of an incident, and how these can be meaningfully mapped in the system. This also includes close coordination with IT, for example regarding server structures, virtual environments, or security requirements.

These solutions are by no means only for large corporations. We work with medium-sized companies as well as with banks, correctional facilities, or public institutions. The decisive factor is not primarily the size of the company, but the specific requirement. Our task is to translate complexity together with the customer into a functioning and sustainable solution.

GEMOS is an example of the importance of digital innovation in the security sector. However, many people also know BKS from other product areas. Can you tell us more about the other product areas?

Wellsow: We see ourselves as a provider of mechanical and electronic system solutions for building security. Accordingly, our portfolio is broad. It ranges from mechanical and electronic locking systems, mortise locks, door hardware, and electric door openers to escape door security, access control systems, as well as building and hazard management systems .

It is important for us not only to supply individual products, but solutions around the door. This is precisely our claim as a solution provider: to take up different requirements and develop a coherent overall system from them. From my point of view, the interplay is particularly important. When customers choose solutions from our company, further components should be able to integrate as seamlessly as possible. This creates added value because everything is coordinated and can be considered together.

Thanks to our affiliation with the Gretsch-Unitas Group and its worldwide subsidiaries, customers abroad also benefit from BKS products and system solutions. Especially in the area of GEMOS, we support this structure with specialists and qualified sales partners.

What developments are there in the area of access control and where are the current challenges?

Wellsow: At BKS, we talk a lot about electronic locking systems. There we see very clearly where the market is heading: Mobile Access is an important topic. Smartphones and other mobile devices are increasingly becoming digital keys, for example via Bluetooth or NFC. With our ixalo Key App, we already offer a concrete solution for this. A second major trend is cloud and smart solutions. They simplify updates, management, and scalability and are particularly attractive for smaller and distributed applications.

At the same time, requirements are also increasing. Data security and data protection are central topics, because networked systems naturally create new attack surfaces—here BKS always follows the current state of security and, of course, the requirements of the BSI Critical Infrastructure Regulation ² . Added to this are the technical complexity of integrations and user acceptance. New technologies must not only work, but also be understandable and reliable in everyday life. Especially for retrofits in existing buildings, investment and operating costs also play a major role.

Many BKS products are classic mechanical solutions—whether locking cylinder or mortise lock. Are there also developments here where electronics are becoming more important? If so, where do these products make sense?

Wellsow: Electronics have also been gaining importance in classic mechanical products for years. Hybrid solutions are particularly exciting, i.e., the combination of mechanical and electronic components. This creates significantly more possibilities for managing access rights, for example for time-limited access or changing user groups, and of course for control and security. For example, mechatronic locks report via their contacts whether a door is locked or not. If you imagine that you would otherwise have to manually check several hundred doors, you quickly see the advantages of combining mechanical and electronic components.

Such solutions are particularly suitable where high security requirements exist, where existing buildings are being modernized, or where a fully networked infrastructure is not immediately available everywhere. Flexibility is especially important in existing buildings, because not every area can be digitized with the same effort. Here, BKS offers economical and reliable solutions.

It can also make economic sense. If, in the event of key loss, entire locking systems no longer have to be replaced, but can be responded to much more specifically, a clear added value is created over the life cycle. Electronics thus not only offer more comfort, but also more flexibility and security.

In addition to the building management system GEMOS, you also offer GEMOS access. What is the difference here and who is GEMOS access aimed at?

Creutziger: GEMOS access is an independently operable professional access control system . Here, the classic tasks of access control are in focus: Who is allowed to enter where and when—it is about badges, time profiles, visitor management, or monitoring of door states.

The system operates web-based and is highly scalable, ranging from smaller applications to large, multi-site installations. Especially in the KRITIS environment, it is also relevant that security-critical interior areas can be specifically secured, for example with two-factor authentication ² . Classic RFID components can be combined with biometric procedures—for example, fingerprint, hand vein, iris, or facial recognition.

An additional advantage is that GEMOS access is based on the same software core as GEMOS. This creates synergies and makes the solution interesting for companies that want to set up professional access control and later expand it further.

Does GEMOS access also work independently of GEMOS?

Creutziger: GEMOS access also works independently of GEMOS. It is designed as a standalone access control system and can be operated separately from smaller applications to larger installations. The advantage is that customers do not need a complete hazard management system to work with GEMOS access. If GEMOS is already in use or added later, the solution can be sensibly integrated. This creates additional synergies, for example in joint operation and in interaction with other security-relevant functions.

We have heard that there are many adjustment screws to consider when protecting critical infrastructures. Can you give a concrete security case as an example of how GEMOS supports users in an emergency?

Creutziger: A typical example from practice is a substation or waterworks. If someone unauthorized enters the premises over the fence, the sensors detect the incident and report it to GEMOS. The system can then automatically switch on appropriate camera images, activate outdoor lighting, or trigger loudspeaker announcements—again, with the great advantage for the operator that everything takes place in one system and user interface, regardless of which specialized systems are in use in the company.

At the same time, the person in the control center receives concrete instructions for action—for example, whom to inform or which steps to initiate. This reduces the stress situation and lowers the probability of errors. The human remains the decision-maker but receives the necessary structure.

Another central point is audit-proof documentation. Every step, every status message, and every event is logged with a timestamp. This traceability is essential, especially in the KRITIS environment, because it shows exactly what happened and which measures were taken afterwards.

[Interview: Walter Nogueira]