--- title: Why IGA-Controlled Electronic Key Systems Are Essential Under the CER Directive description: "Why IGA-controlled electronic key systems are essential under the CER Directive: role-based rights, automatic revocation and audit trails." image: https://key2xs.com/hubfs/image.png --- [![Key2XS](https://key2xs.com/hubfs/img/logo-white-horizontal.svg) ![Key2XS](https://key2xs.com/hubfs/img/logo-blue-horizontal.svg)](https://key2xs.com/?hsLang=nl) Why Governance? [Why Physical Access Governance?](https://key2xs.com/physical-access-governance?hsLang=nl) [CER Directive](https://key2xs.com/cer-directive?hsLang=nl) [NIS2 Directive](https://key2xs.com/nis2-directive?hsLang=nl) [EU Enforcement Tracker](https://key2xs.com/cer-tracker?hsLang=nl) Analyst recognition [KuppingerCole Rising Star 2026](https://key2xs.com/analyst-recognition?hsLang=nl) Industries [Government](https://key2xs.com/sectors/government?hsLang=nl) [Utilities](https://key2xs.com/sectors/utilities?hsLang=nl) [Water management](https://key2xs.com/sectors/water-management?hsLang=nl) [Transport](https://key2xs.com/sectors/transport?hsLang=nl) [Telecom](https://key2xs.com/sectors/telecom?hsLang=nl) Platform [Product](https://key2xs.com/products?hsLang=nl) [How it works](https://key2xs.com/?hsLang=nl#how-it-works) [Integrations](https://key2xs.com/integrations?hsLang=nl) [Book a demo](https://key2xs.com/contact?hsLang=nl) Partners Technology partners [SailPoint](https://key2xs.com/sailpoint-partnership?hsLang=nl) [One Identity](https://key2xs.com/partners/one-identity?hsLang=nl) [Microsoft Entra ID](https://key2xs.com/partners/entra-id?hsLang=nl) [Okta](https://key2xs.com/partners/okta?hsLang=nl) [OpenText](https://key2xs.com/partners/opentext?hsLang=nl) [iLOQ](https://key2xs.com/partners/iloq?hsLang=nl) [ASSA ABLOY](https://key2xs.com/partners/assa-abloy?hsLang=nl) Resell & Implementation partners [Hanab](https://key2xs.com/partners/hanab?hsLang=nl) Resources [Resource center](https://key2xs.com/resources?hsLang=nl) [KuppingerCole Rising Star 2026](https://key2xs.com/analyst-recognition?hsLang=nl) [Events](https://key2xs.com/events?hsLang=nl) Meet us at Navigate [Navigate Austin · Oct 5-8](https://key2xs.com/events/sailpoint-navigate-austin?hsLang=nl) [Navigate London · Nov 2-4](https://key2xs.com/events/sailpoint-navigate-london?hsLang=nl) [ROI calculator](https://key2xs.com/roi-calculator?hsLang=nl) [FAQ](https://key2xs.com/?hsLang=nl#faq) [News](https://key2xs.com/news-archive?hsLang=nl) [Book a demo](https://key2xs.com/contact?hsLang=nl) [Book a demo](https://key2xs.com/contact?hsLang=nl) [← The Key2XS journal](https://key2xs.com/news-archive?hsLang=nl) ASSA Abloy Cliq # Why IGA-Controlled Electronic Key Systems Are Essential Under the CER Directive Jun 24, 2025 · 3 min read · by the Key2XS team ![Why IGA-Controlled Electronic Key Systems Are Essential Under the CER Directive](https://key2xs.com/hubfs/image.png) **In short:** The [CER Directive](https://key2xs.com/cer-directive?hsLang=nl)'s demands — controlled access, rapid revocation, demonstrable compliance — cannot be met with standalone key cabinets. IGA-controlled electronic key systems tie every key right to a governed identity, making CER compliance operational. ### **Why IGA-Controlled Electronic Key Systems Are Essential Under the CER Directive** The EU’s **CER Directive** (Directive on the Resilience of Critical Entities) has brought a significant shift in how **critical infrastructure sectors**—such as energy, transport, water, and health—must approach security and operational resilience. As the directive emphasizes organizational, physical, and cybersecurity measures, **Identity Governance & Administration (IGA)** systems integrated with **electronic key systems** emerge as a non-negotiable component of compliance and risk mitigation.   #### **The Weak Link: Traditional Key Management** Critical infrastructure still relies heavily on mechanical key systems. These systems lack auditability, are prone to human error, and offer little protection against insider threats or unauthorized access. Lost or unreturned keys can expose physical systems to sabotage, theft, or cascading disruptions—risks the CER Directive aims to eliminate. Moreover, traditional key control is siloed from digital access governance. That disconnect leads to poor visibility, fragmented incident response, and a lack of accountability—issues explicitly addressed in the CER’s demand for end-to-end security governance.   #### **CER Requirements That Demand a New Approach** The CER Directive compels operators of essential services to: - **Map all critical assets** and their dependencies, both physical and digital. - **Ensure only authorized personnel** have access to critical infrastructure. - **Implement continuous access control**, monitoring, and auditing. - **Respond to incidents and revoke access quickly**. - **Prove compliance** through evidence-based reporting. These requirements make **manual key management systems insufficient** and highlight the need for integration between physical security and digital identity governance.   #### **The Role of IGA in Physical Access Management** IGA platforms like [SailPoint](https://key2xs.com/integrations/sailpoint-iloq?hsLang=nl), One Identity, or Microsoft Entra ID are already standard for digital identity control. When integrated with electronic key systems such as **ASSA ABLOY’s [CLIQ](https://key2xs.com/integrations/assa-abloy-cliq?hsLang=nl) or [iLOQ](https://key2xs.com/integrations/iloq?hsLang=nl)**, these platforms extend identity governance into the physical realm: - **Centralized access provisioning**: Grant or revoke both digital and physical access in a single workflow. - **Time-based and role-based key activation**: Ensure keys are only active when and where they are needed. - **Automated de-provisioning**: No risk of ex-employees or contractors retaining physical access. - **Audit trails and reporting**: Complete visibility of who accessed what, when, and why—essential for incident response and regulatory compliance.   #### **IGA + Electronic Keys = Full-Spectrum Access Governance** By connecting IGA systems with electronic key platforms, critical entities achieve **holistic access governance**. This alignment creates a seamless link between organizational roles and physical access rights, ensuring that changes in employment status, role, or contract instantly cascade into physical key permissions. This also dramatically improves incident response capabilities. For example, in the event of a breach or security risk, keys can be remotely revoked or deactivated within seconds—something impossible with mechanical keys.   #### **Aligning with CER and [NIS2](https://key2xs.com/nis2-directive?hsLang=nl) Synergy** While the **CER** focuses on physical resilience and organizational security, its sister directive **NIS2** zeroes in on cybersecurity. Integrating IGA with electronic key systems ensures **dual compliance**, creating a unified security fabric that satisfies both directives’ demands for: - Zero-trust access - Identity verification - Asset protection - Evidence-based security governance   #### **Conclusion: A Strategic Necessity, Not a Technical Nice-to-Have** Under the CER Directive, **electronic key systems controlled by IGA platforms** are no longer optional—they’re a critical foundation for compliance, accountability, and operational resilience. Organizations that embrace this integration will not only protect their infrastructure from evolving threats but also position themselves for **regulatory approval, reduced liability**, and **greater trust** from public authorities and partners. ***Those who fail to modernize risk non-compliance, penalties, and worst of all—vulnerabilities that could have been prevented.*** ![](https://key2xs.com/hubfs/1587550138006.jpeg)![](https://key2xs.com/hubfs/img/niels-bakker.png)![](https://key2xs.com/hubfs/1746630921693.jpeg)![](https://key2xs.com/hubfs/1696359051569.jpeg) **Written by the Key2XS team** Key2XS is founder-run. Questions about this piece land with the people who built the platform. [Talk to us](https://key2xs.com/contact?hsLang=nl). ## Keep reading [![](https://key2xs.com/hubfs/image.png) **How the CER Directive Drives Critical Entities Towards Electronic Key Systems**Jun 18, 2025](https://key2xs.com/news/how-the-cer-directive-drives-critical-entities-towards-electronic-key-systems?hsLang=nl) [![](https://key2xs.com/hubfs/71050033_m.png) **Why Key Systems Fundamentally Differ from Card Systems**Apr 07, 2026](https://key2xs.com/news/why-key-systems-fundamentally-differ-from-card-systems?hsLang=nl) [![](https://key2xs.com/hubfs/206140155_m.png) **Energy resilience fails when physical access is unmanaged**Jun 18, 2026](https://key2xs.com/news/energy-resilience-fails-when-physical-access-is-unmanaged?hsLang=nl) ## Govern the keys you already have See identity, policy and physical keys in one 30-minute demo, scoped to your estate. [Book a demo](https://key2xs.com/contact?hsLang=nl) [More in the journal](https://key2xs.com/news-archive?hsLang=nl) ### Contact us [Wilhelmina van Pruisenweg 104, 2595 AN Den Haag](https://maps.google.com/?q=Wilhelmina+van+Pruisenweg+104+Den+Haag) Kraanspoor 50, 1033 SE Amsterdam, The Netherlands [info@key2xs.com](mailto:info@key2xs.com) [+31(0)70 2045180](tel:+31(0)702045180) ### Platform - [Why Physical Access Governance?](https://key2xs.com/physical-access-governance?hsLang=nl) - [Product](https://key2xs.com/products?hsLang=nl) - [Integrations](https://key2xs.com/integrations?hsLang=nl) - [ROI calculator](https://key2xs.com/roi-calculator?hsLang=nl) ### Compliance - [CER Directive](https://key2xs.com/cer-directive?hsLang=nl) - [NIS2 Directive](https://key2xs.com/nis2-directive?hsLang=nl) - [EU Enforcement Tracker](https://key2xs.com/cer-tracker?hsLang=nl) ### Company - [SailPoint partnership](https://key2xs.com/sailpoint-partnership?hsLang=nl) - [Resource center](https://key2xs.com/resources?hsLang=nl) - [Events](https://key2xs.com/events?hsLang=nl) - [News](https://key2xs.com/news-archive?hsLang=nl) - [Contact](https://key2xs.com/contact?hsLang=nl) [![Penetration tested and verified by Sekurno](https://key2xs.com/hubfs/img/badges/sekurno-pentest-badge-white.svg)](https://www.sekurno.com/verified/key2xs) [![KuppingerCole Analysts Rising Star 2026 badge for Key2XS](https://key2xs.com/hubfs/img/badges/kuppingercole-rising-star-2026-key2xs.svg)](https://key2xs.com/analyst-recognition?hsLang=nl) --- ![Key2XS](https://key2xs.com/hubfs/img/logo-white-horizontal.svg) Key2XS, pronounced “key to access” © 2026 Key2XS B.V. All rights reserved [Privacy](https://key2xs.com/privacy-statement?hsLang=nl) Cookie Preferences Patent Pending Nr: 2040721 & 2041284 Key2XS & ActiveAuth are registered trademarks of Key2XS Assets B.V. ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Key2XS", "url" : "https://key2xs.com/news/author/key2xs-2" }, "dateModified" : "2025-09-16T07:32:23.574Z", "datePublished" : "2025-06-24T10:28:43.000Z", "headline" : "Why IGA-Controlled Electronic Key Systems Are Essential Under the CER Directive", "image" : [ "https://key2xs.com/hubfs/image.png" ], "mainEntityOfPage" : { "@id" : "https://key2xs.com/news/why-iga-controlled-electronic-key-systems-are-essential-under-the-cer-directive", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://key2xs.com/hubfs/logo%20blue.svg" }, "name" : "Key2XS B.V." } } ```