On June 21, 2017, the Critics Ordinance was amended to include the transport and traffic sector as a critical infrastructure. As a result, cities with more than 500,000 inhabitants must carry out an audit in accordance with §8a of the BSI Act every two years. These audits are carried out by independent audit teams with audit competence, IT security competence, industry competence and special test procedure competence according to §8a BSIG (Gesetz über das Bundesamt für Sicherheit in der Informationstechnik). AlbrechtConsult has been commissioned by the city of Munich to cover the industry competence in the audit team.