A decade-long, brand-new terminal (Piers G/H/J, new Sky Line people mover, 57 airlines relocating in waves). One of Europe's most advanced facilities — and an enormous new IT/OT estate to secure as it ramps to full operation.
Fraport's in-house Digital Factory has scaled 80+ digitalisation projects in five years; it co-founded the AeroAS autonomous-airport-operations programme with 120 international airports, and was first in the world to deploy walkthrough CT scanners. This is not a buyer that needs basic security — it needs independent assurance and specialist depth.
Fraport operates a comprehensive Safety & Security division (80,000 people, SLS control centre, crisis management, SMS) and invested €50M in AI-assisted screening (APIDS, 50+ Smiths Detection CT scanners). They provide IT and security services to others — so the value is peer-level assurance, OT, and surge, never displacement.
Fraport operates and advises airports worldwide. Security standards that travel across a global portfolio are a multi-site assurance need at scale.
NIS2UmsuCG is live (6 Dec 2025, no transition). As the largest German KRITIS airport, Fraport is a “besonders wichtige Einrichtung” with §38 board liability, §32 reporting, §30 supply-chain duties and €10M/2% fines. Scale makes both the obligation and the target profile maximal.
Frankfurt ran different passenger systems and was untouched in September 2025. As the country's flagship hub it cannot rely on that: a single uncontrolled supplier remains a structural risk, and NIS2 now makes supply-chain assurance a legal duty.
A massive new terminal estate plus AeroAS autonomy and AI deployments create OT/IT convergence and emerging-tech risk that even a strong internal team benefits from stress-testing independently.
The highest-value thing you can offer an organisation that runs its own security: prove it from the outside.
A brand-new terminal is a brand-new OT estate (BHS, building systems, people mover, energy) ramping to full load.
September's lesson, now a NIS2 duty — at the scale of the country's largest airport.
Part-IS reaches Fraport as a major operator; independent QE backing strengthens the position.
Even a strong in-house team needs external surge and forensics for a major incident.
Autonomy and AI on the airfield are emerging, high-stakes attack surfaces.
Two German industrial champions. Airbus Protect engages Fraport as a technical equal offering independent assurance and specialist depth — explicitly not a vendor displacing their respected internal security org.
An organisation that runs its own security gains most from a credible external adversary and assessor. Airbus Protect provides exactly that, with aviation context no generalist matches.
Independent, EASA-recognised Part-IS assurance for a flagship operator that values rigour.
T3, AeroAS autonomy and AI ops need a partner at the leading edge of OT and autonomous-system security — Airbus's home ground.