--- title: "Adapting to the CER Directive: Organizational Changes in Facility Management and ICT" description: "Part 2 of our CER series: how the CER Directive changes facility management and ICT organizations, and why physical access must be governed like IT." image: https://key2xs.com/hubfs/Part%202.jpg --- [![Key2XS](https://key2xs.com/hubfs/img/logo-white-horizontal.svg) ![Key2XS](https://key2xs.com/hubfs/img/logo-blue-horizontal.svg)](https://key2xs.com/?hsLang=nl) Why Governance? [Why Physical Access Governance?](https://key2xs.com/physical-access-governance?hsLang=nl) [CER Directive](https://key2xs.com/cer-directive?hsLang=nl) [NIS2 Directive](https://key2xs.com/nis2-directive?hsLang=nl) [EU Enforcement Tracker](https://key2xs.com/cer-tracker?hsLang=nl) Analyst recognition [KuppingerCole Rising Star 2026](https://key2xs.com/analyst-recognition?hsLang=nl) Industries [Government](https://key2xs.com/sectors/government?hsLang=nl) [Utilities](https://key2xs.com/sectors/utilities?hsLang=nl) [Water management](https://key2xs.com/sectors/water-management?hsLang=nl) [Transport](https://key2xs.com/sectors/transport?hsLang=nl) [Telecom](https://key2xs.com/sectors/telecom?hsLang=nl) Platform [Product](https://key2xs.com/products?hsLang=nl) [How it works](https://key2xs.com/?hsLang=nl#how-it-works) [Integrations](https://key2xs.com/integrations?hsLang=nl) [Book a demo](https://key2xs.com/contact?hsLang=nl) Partners Technology partners [SailPoint](https://key2xs.com/sailpoint-partnership?hsLang=nl) [One Identity](https://key2xs.com/partners/one-identity?hsLang=nl) [Microsoft Entra ID](https://key2xs.com/partners/entra-id?hsLang=nl) [Okta](https://key2xs.com/partners/okta?hsLang=nl) [OpenText](https://key2xs.com/partners/opentext?hsLang=nl) [iLOQ](https://key2xs.com/partners/iloq?hsLang=nl) [ASSA ABLOY](https://key2xs.com/partners/assa-abloy?hsLang=nl) Resell & Implementation partners [Hanab](https://key2xs.com/partners/hanab?hsLang=nl) Resources [Resource center](https://key2xs.com/resources?hsLang=nl) [KuppingerCole Rising Star 2026](https://key2xs.com/analyst-recognition?hsLang=nl) [Events](https://key2xs.com/events?hsLang=nl) Meet us at Navigate [Navigate Austin · Oct 5-8](https://key2xs.com/events/sailpoint-navigate-austin?hsLang=nl) [Navigate London · Nov 2-4](https://key2xs.com/events/sailpoint-navigate-london?hsLang=nl) [ROI calculator](https://key2xs.com/roi-calculator?hsLang=nl) [FAQ](https://key2xs.com/?hsLang=nl#faq) [News](https://key2xs.com/news-archive?hsLang=nl) [Book a demo](https://key2xs.com/contact?hsLang=nl) [Book a demo](https://key2xs.com/contact?hsLang=nl) [← The Key2XS journal](https://key2xs.com/news-archive?hsLang=nl) ASSA Abloy Cliq # Adapting to the CER Directive: Organizational Changes in Facility Management and ICT May 27, 2025 · 3 min read · by the Key2XS team ![Adapting to the CER Directive: Organizational Changes in Facility Management and ICT](https://key2xs.com/hubfs/Part%202.jpg) **In short:** The [CER Directive](https://key2xs.com/cer-directive?hsLang=nl) forces organizational change, not just paperwork: facility management and ICT can no longer operate in silos. Physical access must be governed with the same rigor as digital access, which reshapes roles, processes and tooling in both departments. ## **Adapting to the CER Directive: Organizational Changes in Facility Management and ICT (Part 2 of our CER Series)** With the enforcement of the **Critical Entities Resilience (CER) Directive** across the European Union, critical infrastructure operators are facing not just a compliance challenge, but a **strategic shift** in how their organizations are structured and managed — particularly within **Facility Management** and **Information & Communication Technology (ICT)** departments. The CER Directive, which aims to ensure the **resilience of critical entities** against a broad spectrum of risks, requires far-reaching changes that affect operational protocols, governance models, and internal collaboration frameworks.   ---   ### **1. Facility Management: From Maintenance to Mission-Critical Security** Historically viewed as operational support, Facility Management (FM) is now elevated to a **frontline security role** under CER: - **Access Control Becomes Strategic**: FM must now manage access systems in accordance with risk-based criteria. This includes implementing **electronic access control**, **auditable key management**, and integration with identity systems. - **Redefinition of Critical Zones**: Facilities must be zoned based on risk profiles. FM departments are responsible for **conducting risk assessments**, labeling high-risk areas, and ensuring that access to these areas is monitored and controlled. - **Emergency Preparedness Planning**: CER mandates robust continuity planning. FM must now play a key role in **scenario planning**, managing **evacuation protocols**, **physical redundancies**, and **emergency communication infrastructure**. - **Collaboration with Security and ICT**: FM teams must now work closely with ICT and security departments to unify physical and digital safeguards — a departure from siloed facility operations.   ---   ### **2. ICT: From Support System to Integrated Risk Engine** The CER Directive expands the role of ICT beyond traditional cybersecurity, placing it at the heart of **resilience planning and real-time risk management**: - **Convergence of Physical and Logical Access**: ICT must integrate facility access controls (e.g., smart locks, badge systems) with digital identity platforms like **Microsoft [Entra ID](https://key2xs.com/integrations/entra-id-iloq?hsLang=nl)** or **[SailPoint](https://key2xs.com/integrations/sailpoint-iloq?hsLang=nl)** to enforce role-based access policies that span both physical and digital realms. - **Compliance and Reporting Architecture**: ICT is now responsible for ensuring that systems generate **compliant audit logs**, **access reports**, and **anomaly alerts** — data that is essential for CER audits and incident response. - **Resilience by Design**: Infrastructure must be re-engineered for fault tolerance and disaster recovery. This includes **redundant network paths**, **cloud failovers**, and **secure remote access** solutions for key staff. - **Cyber-Physical Risk Models**: ICT departments are required to participate in joint risk assessments with FM, modeling **hybrid threat scenarios** where cyber-attacks have physical consequences (e.g., disabling HVAC in a data center).   ---   ### **3. Cross-Functional Governance and New Roles** The CER Directive fosters a **convergence of responsibilities**, requiring organizations to rethink governance structures: - **Creation of a Chief Resilience Officer (CRO)**: Many organizations are introducing this new role to bridge the gap between security, operations, FM, and ICT. - **Resilience Committees**: Cross-functional committees including FM, ICT, HR, legal, and security are being formed to monitor compliance and guide policy. - **Training & Awareness**: Both FM and ICT staff require upskilling in risk analysis, regulatory frameworks, and incident coordination.   ---   ### **Conclusion** The CER Directive is more than a compliance requirement — it is a **transformation trigger**. Facility Management and ICT are no longer peripheral services; they are now central to an organization’s **resilience posture**. For critical entities, the challenge lies not only in updating systems, but in **aligning people, processes, and technology** around a shared mission: the protection of Europe’s most vital infrastructure. ![](https://key2xs.com/hubfs/1587550138006.jpeg)![](https://key2xs.com/hubfs/img/niels-bakker.png)![](https://key2xs.com/hubfs/1746630921693.jpeg)![](https://key2xs.com/hubfs/1696359051569.jpeg) **Written by the Key2XS team** Key2XS is founder-run. Questions about this piece land with the people who built the platform. [Talk to us](https://key2xs.com/contact?hsLang=nl). ## Keep reading [![](https://key2xs.com/hubfs/Part%204.jpg) **Legal Accountability in the Energy Sector Under the CER Directive: A New Era of Responsibility**Jun 02, 2025](https://key2xs.com/news/legal-accountability-in-the-energy-sector-under-the-cer-directive-a-new-era-of-responsibility?hsLang=nl) [![](https://key2xs.com/hubfs/Part%2010.jpg) **Building Resilience: What Every Critical Entity Needs to Know About the CER Directive**Jun 11, 2025](https://key2xs.com/news/building-resilience-what-every-critical-entity-needs-to-know-about-the-cer-directive?hsLang=nl) [![](https://key2xs.com/hubfs/Part%208.jpg) **CRO vs. CISO: Distinct but Complementary Roles Under the CER Directive**Jun 06, 2025](https://key2xs.com/news/cro-vs.-ciso-distinct-but-complementary-roles-under-the-cer-directive?hsLang=nl) ## Govern the keys you already have See identity, policy and physical keys in one 30-minute demo, scoped to your estate. [Book a demo](https://key2xs.com/contact?hsLang=nl) [More in the journal](https://key2xs.com/news-archive?hsLang=nl) ### Contact us [Wilhelmina van Pruisenweg 104, 2595 AN Den Haag](https://maps.google.com/?q=Wilhelmina+van+Pruisenweg+104+Den+Haag) Kraanspoor 50, 1033 SE Amsterdam, The Netherlands [info@key2xs.com](mailto:info@key2xs.com) [+31(0)70 2045180](tel:+31(0)702045180) ### Platform - [Why Physical Access Governance?](https://key2xs.com/physical-access-governance?hsLang=nl) - [Product](https://key2xs.com/products?hsLang=nl) - [Integrations](https://key2xs.com/integrations?hsLang=nl) - [ROI calculator](https://key2xs.com/roi-calculator?hsLang=nl) ### Compliance - [CER Directive](https://key2xs.com/cer-directive?hsLang=nl) - [NIS2 Directive](https://key2xs.com/nis2-directive?hsLang=nl) - [EU Enforcement Tracker](https://key2xs.com/cer-tracker?hsLang=nl) ### Company - [SailPoint partnership](https://key2xs.com/sailpoint-partnership?hsLang=nl) - [Resource center](https://key2xs.com/resources?hsLang=nl) - [Events](https://key2xs.com/events?hsLang=nl) - [News](https://key2xs.com/news-archive?hsLang=nl) - [Contact](https://key2xs.com/contact?hsLang=nl) [![Penetration tested and verified by Sekurno](https://key2xs.com/hubfs/img/badges/sekurno-pentest-badge-white.svg)](https://www.sekurno.com/verified/key2xs) [![KuppingerCole Analysts Rising Star 2026 badge for Key2XS](https://key2xs.com/hubfs/img/badges/kuppingercole-rising-star-2026-key2xs.svg)](https://key2xs.com/analyst-recognition?hsLang=nl) --- ![Key2XS](https://key2xs.com/hubfs/img/logo-white-horizontal.svg) Key2XS, pronounced “key to access” © 2026 Key2XS B.V. All rights reserved [Privacy](https://key2xs.com/privacy-statement?hsLang=nl) Cookie Preferences Patent Pending Nr: 2040721 & 2041284 Key2XS & ActiveAuth are registered trademarks of Key2XS Assets B.V. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Key2XS", "url" : "https://key2xs.com/news/author/key2xs-2" }, "dateModified" : "2025-09-16T07:46:49.541Z", "datePublished" : "2025-05-27T07:00:00.000Z", "headline" : "Adapting to the CER Directive: Organizational Changes in Facility Management and ICT", "image" : [ "https://key2xs.com/hubfs/Part%202.jpg" ], "mainEntityOfPage" : { "@id" : "https://key2xs.com/news/adapting-to-the-cer-directive-organizational-changes-in-facility-management-and-ict", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://key2xs.com/hubfs/logo%20blue.svg" }, "name" : "Key2XS B.V." } } ```