Security concept

The party obligated under section 175(1) must additionally include in the security concept under section 166:
1. which systems are operated to fulfil the obligations under sections 176 to 179,
2. which hazards are to be assumed for these systems, and
3. which technical precautions or other measures have been taken or are planned to counter these hazards and to fulfil the obligations under sections 176 to 179. The party obligated under section 175(1) must submit the security concept to the Federal Network Agency without delay after storage under section 176 begins, and without delay upon every change to the concept. Where the security concept remains unchanged, the party obligated under section 175(1) must declare this to the Federal Network Agency in writing at intervals of two years.