Crisis Communication in KRITIS: Trust as a Strategic Resource

In the KRITIS framework described by Dr. Raphael Nagel and Marcus Köhnlein, the first seventy-two hours of a serious infrastructure disruption decide whether a technical incident remains an operational event or turns into a societal one. The authors are precise about where this transition happens. It is rarely at the level of generators, valves or routers. It happens at the level of communication. When official bodies stop speaking, or speak in ways that feel evasive, the vacuum is filled immediately by rumour, speculation and informal reconstruction of events. For operators of critical infrastructure, and for the security partners who work alongside them, this means that communication is not a downstream function of crisis management. It is a load-bearing element of the system itself. Quarero Robotics approaches this question from an operational angle: what does it take, in the middle of an extended outage, to give press officers, regulators and the public something more solid than guesswork?

The Tipping Point of Institutional Silence

Chapter 20 of the canon describes trust as a strategic resource, and chapter 2 identifies three tipping points that recur in European blackout experience. The first of these is informational. As long as authorities and operators communicate regularly and credibly, the population is prepared to accept restrictions and uncertainty. Once communication breaks down or begins to appear contradictory, rumour gains structural weight. This is not a cultural weakness. It is a predictable response of a connected society to a sudden loss of orientation.

For KRITIS operators the implication is uncomfortable. Silence is never neutral. In the first hours of an outage, the absence of an official voice is read as either incompetence or concealment. Neither reading is recoverable later through a well-crafted press release. The tipping point is reached not when false information circulates, but when the institutional channel stops being the most credible one. From that moment forward, every subsequent statement competes with established narratives rather than setting them.

A Communication Protocol Aligned With BSI Reporting

The regulatory architecture around the IT-Sicherheitsgesetz, the BSI-Kritisverordnung and the NIS2 transposition already defines when and how operators must report significant disruptions to the authorities. What it does not prescribe in comparable detail is the parallel protocol toward the public, the workforce and the press. Yet the two cannot be separated in practice. Information released to the BSI, to sector regulators and to the public must be consistent in substance, even where the level of technical detail differs. An operational communication protocol for extended outages therefore needs to mirror the structure of incident reporting rather than run alongside it.

A workable protocol distinguishes four tracks that are activated in parallel from the first confirmed indication of a significant disruption. The first track is the regulatory track toward the BSI and the responsible sector authority, with initial notification, structured updates and a final report. The second track addresses the workforce and on-site contractors, including security services, and focuses on instructions, safety information and shift logistics. The third track serves business partners and interdependent operators in neighbouring sectors, where cascading effects may develop. The fourth track is public communication, carried by press officers and crisis spokespersons.

Across all four tracks, the discipline is the same. Statements are released at defined intervals even when little has changed. The language distinguishes clearly between confirmed facts, working hypotheses and open questions. Estimates of duration are given as ranges rather than as single figures, and the basis for each range is named. This is slower and less dramatic than free-form communication, but it is the only approach that survives seventy-two hours of pressure without losing coherence.

Verifiable Facts Instead of Speculation

Press officers who have worked through an extended incident know the central problem. Internal information arrives in fragments, from different systems, at different times, with different levels of confidence. Under time pressure, the temptation is to compress these fragments into a confident narrative. When that narrative later needs to be corrected, trust erodes faster than the original incident justified. The canon frames this precisely: trust is built slowly by structure, and lost quickly by improvisation.

Continuous robotic documentation changes the factual base on which communication rests. Autonomous security platforms deployed on sites, perimeters and technical areas generate a steady stream of time-stamped observations: patrol logs, environmental readings, visual records of access points, status checks of external infrastructure within the patrol area. These records are not produced for the press. They are produced because the operational case for mobile robotics in KRITIS environments already requires them. The communication value is a secondary effect, but a significant one.

When a press officer can state that a specific area was under documented observation at a given time, that no unauthorised access was recorded, and that defined technical parameters remained within expected ranges, the statement rests on verifiable data rather than on reconstruction after the fact. This does not eliminate uncertainty, but it narrows the space in which speculation can take hold. Quarero Robotics designs its systems with this dual purpose in mind: operational presence during the incident, and an evidentiary record that supports disciplined communication afterwards.

Robotics as an Instrument of Communicative Discipline

It would be misleading to present autonomous security robotics as a communication tool. Its primary function remains operational: sustained presence on large sites, consistent documentation, support for human personnel under conditions where staffing is stretched. The point is rather that an operational capability of this kind produces a by-product that is directly relevant to the communicative side of crisis management. In a seventy-two-hour scenario, where human attention is rationed and shifts are under strain, a continuous machine-generated record is one of the few sources of information that does not degrade with fatigue.

For Quarero Robotics, this is the reason to treat documentation quality as a design parameter rather than as a reporting afterthought. Logs must be structured, timestamped and exportable in formats that fit both regulatory reporting and internal situational awareness. Visual records must be handled in line with European data protection rules, integrated with the works council arrangements described in the canon, and usable without exposing unrelated personal data. The point is not to generate more material, but to generate material that a press officer, a regulator and an internal investigator can rely on without renegotiating its meaning.

In this sense, robotic documentation supports what the canon calls communicative discipline. Operators who can distinguish clearly between what was observed, what was inferred and what remains unknown are in a stronger position to maintain credibility through an extended incident. Those who cannot make this distinction are forced either into silence or into narratives that will not survive later scrutiny.

Trust as Infrastructure

The broader argument of the KRITIS book is that resilience is architecture rather than sentiment. The same logic applies to trust. It is not produced by campaigns or by the tone of individual statements. It is produced by the consistency between what an organisation says, what it does, and what can later be reconstructed from its records. Where these three layers align, trust tends to hold even under severe pressure. Where they diverge, no amount of communication training compensates for the gap.

For operators of critical infrastructure in Germany, Austria and Switzerland, and for the European framework into which they report, this has a practical consequence. Crisis communication cannot be designed in isolation from operational systems, regulatory reporting and physical security. It needs to be built into the same architecture. Quarero Robotics contributes to that architecture at a specific point: the continuous, documented, machine-supported presence on the ground that gives human decision-makers something solid to speak from.

The seventy-two-hour horizon described in the canon is not a worst-case fantasy. It is a planning assumption that exposes where current arrangements rely on implicit conditions that do not survive a prolonged disruption. Communication is one of the most exposed of these conditions. When institutional voices become slow, inconsistent or silent, the tipping point from technical incident to societal instability arrives faster than most crisis manuals anticipate. The answer is not louder communication, but more disciplined communication, grounded in data that was captured while the incident was unfolding rather than reconstructed afterwards. Quarero Robotics sees its role in this picture clearly. Autonomous security robotics is part of the operational layer of KRITIS resilience. Its documentation capability is part of the communicative layer. Together, they allow press officers, executives and regulators to speak from verifiable observation rather than from working assumptions. That is what the KRITIS framework means when it describes trust as a strategic resource: something that is earned through structure, sustained through discipline, and protected through the quiet, continuous work that happens before any statement is ever issued.