--- title: The Impact of the Critical Entities Resilience (CER) Directive on Key Systems in Europe description: "Part 1 of our CER series: what the EU Critical Entities Resilience Directive means for physical key systems and access security across Europe." image: https://key2xs.com/hubfs/part%201.jpg --- [![Key2XS](https://key2xs.com/hubfs/img/logo-white-horizontal.svg) ![Key2XS](https://key2xs.com/hubfs/img/logo-blue-horizontal.svg)](https://key2xs.com/?hsLang=nl) Why Governance? [Why Physical Access Governance?](https://key2xs.com/physical-access-governance?hsLang=nl) [CER Directive](https://key2xs.com/cer-directive?hsLang=nl) [NIS2 Directive](https://key2xs.com/nis2-directive?hsLang=nl) [EU Enforcement Tracker](https://key2xs.com/cer-tracker?hsLang=nl) Analyst recognition [KuppingerCole Rising Star 2026](https://key2xs.com/analyst-recognition?hsLang=nl) Industries [Government](https://key2xs.com/sectors/government?hsLang=nl) [Utilities](https://key2xs.com/sectors/utilities?hsLang=nl) [Water management](https://key2xs.com/sectors/water-management?hsLang=nl) [Transport](https://key2xs.com/sectors/transport?hsLang=nl) [Telecom](https://key2xs.com/sectors/telecom?hsLang=nl) Platform [Product](https://key2xs.com/products?hsLang=nl) [How it works](https://key2xs.com/?hsLang=nl#how-it-works) [Integrations](https://key2xs.com/integrations?hsLang=nl) [Book a demo](https://key2xs.com/contact?hsLang=nl) Partners Technology partners [SailPoint](https://key2xs.com/sailpoint-partnership?hsLang=nl) [One Identity](https://key2xs.com/partners/one-identity?hsLang=nl) [Microsoft Entra ID](https://key2xs.com/partners/entra-id?hsLang=nl) [Okta](https://key2xs.com/partners/okta?hsLang=nl) [OpenText](https://key2xs.com/partners/opentext?hsLang=nl) [iLOQ](https://key2xs.com/partners/iloq?hsLang=nl) [ASSA ABLOY](https://key2xs.com/partners/assa-abloy?hsLang=nl) Resell & Implementation partners [Hanab](https://key2xs.com/partners/hanab?hsLang=nl) Resources [Resource center](https://key2xs.com/resources?hsLang=nl) [KuppingerCole Rising Star 2026](https://key2xs.com/analyst-recognition?hsLang=nl) [Events](https://key2xs.com/events?hsLang=nl) Meet us at Navigate [Navigate Austin · Oct 5-8](https://key2xs.com/events/sailpoint-navigate-austin?hsLang=nl) [Navigate London · Nov 2-4](https://key2xs.com/events/sailpoint-navigate-london?hsLang=nl) [ROI calculator](https://key2xs.com/roi-calculator?hsLang=nl) [FAQ](https://key2xs.com/?hsLang=nl#faq) [News](https://key2xs.com/news-archive?hsLang=nl) [Book a demo](https://key2xs.com/contact?hsLang=nl) [Book a demo](https://key2xs.com/contact?hsLang=nl) [← The Key2XS journal](https://key2xs.com/news-archive?hsLang=nl) ASSA Abloy Cliq # The Impact of the Critical Entities Resilience (CER) Directive on Key Systems in Europe May 26, 2025 · 3 min read · by the Key2XS team ![The Impact of the Critical Entities Resilience (CER) Directive on Key Systems in Europe](https://key2xs.com/hubfs/part%201.jpg) **In short:** The [CER Directive](https://key2xs.com/cer-directive?hsLang=nl) sets a new baseline for critical infrastructure security in Europe, replacing the older ECI framework and imposing broad obligations on operators — including demonstrable control over physical access to critical assets. Part 1 of our series maps what changes for key systems. **The Impact of the Critical Entities Resilience (CER) Directive on Key Systems in Europe (Part 1 of our CER Series)** With the introduction of the European Union’s **Critical Entities Resilience (CER) Directive**, a new standard has been set for the **security and continuity of critical infrastructure**. This directive, which replaces parts of the former ECI (European Critical Infrastructure) framework, imposes broad responsibilities on operators in sectors such as energy, transport, water, health, and digital infrastructure. Among the many security requirements introduced, one area of significant consequence is **physical access control** — particularly the use and management of **key systems**. ### **What Is the CER Directive?** Adopted in 2022 and entering into force in 2024, the CER Directive obliges EU Member States to ensure that critical entities are **resilient against physical and cyber threats**. This includes not only terrorism and sabotage, but also natural disasters, pandemics, and hybrid threats. Critical entities must identify essential services, assess risks, and implement comprehensive security measures. A key focus of the CER Directive is on **preventing unauthorized access** to facilities, which places a new level of scrutiny on **mechanical and electronic key systems**, including smart locks and centralized key management platforms.   ---   ### **Key Consequences for Key Systems**   #### **1.  Enhanced Access Governance** Organizations must now **document and justify** who has access to what areas and why. This requires key systems to be fully **auditable**, with logs of access attempts, time stamps, and traceability per individual or role. #### **2. Shift to Electronic and Smart Keys** Traditional mechanical keys are often insufficient to meet the CER requirements for **real-time access control and auditability**. As a result, critical infrastructure providers are rapidly adopting **electronic key systems**, such as those offered by ASSA Abloy [CLIQ](https://key2xs.com/integrations/assa-abloy-cliq?hsLang=nl), which support remote activation, deactivation, and time-restricted access rights. #### **3. Integration with Identity and Security Frameworks** The CER Directive encourages integration between **physical and logical access management**. That means key systems must increasingly tie into **identity governance platforms** like Microsoft [Entra ID](https://key2xs.com/integrations/entra-id-iloq?hsLang=nl) or [SailPoint](https://key2xs.com/integrations/sailpoint-iloq?hsLang=nl) Identity Security Cloud, enabling unified policies across buildings, networks, and applications. #### **4. Stronger Requirements for Key Loss or Theft** Under CER, the loss of a single key — especially if it grants access to critical areas — may trigger a **reporting obligation** and could require immediate mitigation actions. This has led to more interest in **AI-assisted key tracking**, automatic expiration of unused credentials, and key-less solutions. #### **5. Third-Party Access Controls** Contractors and external technicians working with critical entities must also comply. Key systems need to support **temporary credentials** and **fine-grained permissions**, with full audit trails for external personnel.   ---   ### **Strategic Implications** The CER Directive is not just a compliance obligation — it’s a catalyst for **modernizing access control strategies**. Organizations that proactively invest in **resilient, intelligent, and integrated key management systems** not only reduce risk but gain operational flexibility and regulatory peace of mind. For vendors and integrators, this presents both a challenge and an opportunity: to deliver key systems that are **secure by design**, support centralized oversight, and align with broader **critical infrastructure protection goals**.   ---   ### **Conclusion** As Europe raises the bar for critical infrastructure protection, the humble key is no longer a simple piece of metal — it is a **regulated, strategic asset**. The CER Directive mandates a fundamental rethink of how organizations grant and manage access, and for many, this will mean a move to **next-generation key systems** that meet the new standard of resilience.   ---   ![](https://key2xs.com/hubfs/1587550138006.jpeg)![](https://key2xs.com/hubfs/img/niels-bakker.png)![](https://key2xs.com/hubfs/1746630921693.jpeg)![](https://key2xs.com/hubfs/1696359051569.jpeg) **Written by the Key2XS team** Key2XS is founder-run. Questions about this piece land with the people who built the platform. [Talk to us](https://key2xs.com/contact?hsLang=nl). ## Keep reading [![](https://key2xs.com/hubfs/image.png) **CER implementation across the EU. Status as of 8 February 2026**Feb 08, 2026](https://key2xs.com/news/cer-implementation-across-the-eu.-status-as-of-8-february-2026?hsLang=nl) [![](https://key2xs.com/hubfs/191470477_m.png) **News CER Implementation in the EU: From Legal Deadline to Operational Reality juni 1, 2026**Jun 01, 2026](https://key2xs.com/news/news-cer-implementation-in-the-eu-from-legal-deadline-to-operational-reality-juni-1-2026?hsLang=nl) [![](https://key2xs.com/hubfs/86965399_m.png) **Practical guidance on the application of the Cyber Resilience Act**Aug 03, 2026](https://key2xs.com/news/practical-guidance-on-the-application-of-the-cyber-resilience-act?hsLang=nl) ## Govern the keys you already have See identity, policy and physical keys in one 30-minute demo, scoped to your estate. [Book a demo](https://key2xs.com/contact?hsLang=nl) [More in the journal](https://key2xs.com/news-archive?hsLang=nl) ### Contact us [Wilhelmina van Pruisenweg 104, 2595 AN Den Haag](https://maps.google.com/?q=Wilhelmina+van+Pruisenweg+104+Den+Haag) Kraanspoor 50, 1033 SE Amsterdam, The Netherlands [info@key2xs.com](mailto:info@key2xs.com) [+31(0)70 2045180](tel:+31(0)702045180) ### Platform - [Why Physical Access Governance?](https://key2xs.com/physical-access-governance?hsLang=nl) - [Product](https://key2xs.com/products?hsLang=nl) - [Integrations](https://key2xs.com/integrations?hsLang=nl) - [ROI calculator](https://key2xs.com/roi-calculator?hsLang=nl) ### Compliance - [CER Directive](https://key2xs.com/cer-directive?hsLang=nl) - [NIS2 Directive](https://key2xs.com/nis2-directive?hsLang=nl) - [EU Enforcement Tracker](https://key2xs.com/cer-tracker?hsLang=nl) ### Company - [SailPoint partnership](https://key2xs.com/sailpoint-partnership?hsLang=nl) - [Resource center](https://key2xs.com/resources?hsLang=nl) - [Events](https://key2xs.com/events?hsLang=nl) - [News](https://key2xs.com/news-archive?hsLang=nl) - [Contact](https://key2xs.com/contact?hsLang=nl) [![Penetration tested and verified by Sekurno](https://key2xs.com/hubfs/img/badges/sekurno-pentest-badge-white.svg)](https://www.sekurno.com/verified/key2xs) [![KuppingerCole Analysts Rising Star 2026 badge for Key2XS](https://key2xs.com/hubfs/img/badges/kuppingercole-rising-star-2026-key2xs.svg)](https://key2xs.com/analyst-recognition?hsLang=nl) --- ![Key2XS](https://key2xs.com/hubfs/img/logo-white-horizontal.svg) Key2XS, pronounced “key to access” © 2026 Key2XS B.V. All rights reserved [Privacy](https://key2xs.com/privacy-statement?hsLang=nl) Cookie Preferences Patent Pending Nr: 2040721 & 2041284 Key2XS & ActiveAuth are registered trademarks of Key2XS Assets B.V. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Key2XS", "url" : "https://key2xs.com/news/author/key2xs-2" }, "dateModified" : "2025-09-16T07:45:01.064Z", "datePublished" : "2025-05-26T08:00:00.000Z", "headline" : "The Impact of the Critical Entities Resilience (CER) Directive on Key Systems in Europe", "image" : [ "https://key2xs.com/hubfs/part%201.jpg" ], "mainEntityOfPage" : { "@id" : "https://key2xs.com/news/the-impact-of-the-critical-entities-resilience-cer-directive-on-key-systems-in-europe", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://key2xs.com/hubfs/logo%20blue.svg" }, "name" : "Key2XS B.V." } } ```