and by using and sharing cyber defence structures, processes and reporting with
regard to defence-related aspects and situations. As high-tech army deployed
around the world, the Bundeswehr constantly faces threats in cyberspace. But
the armed forces depend on cyberspace in order to function.
Cyber defence and cyber prevention must be incorporated into all overall defence planning, structures and processes. Information security and the protection
of the Bundeswehr’s IT systems are assured around the clock as a standing operational task, both in Germany and in its areas of operations. For the Bundeswehr to perform its tasks in cyberspace, its own capabilities are being expanded, the security architecture of its IT systems is being consolidated, and
previously fragmented structures are being brought together in a ministerial division and a new, separate military organizational unit.
In addition, the Bundeswehr has special expertise, capabilities and resources
which can be made available to other government actors through administrative
assistance, within the limits allowed by constitutional law. The Bundeswehr can
also use the services of civilian businesses to help it carry out its tasks as mandated by the Constitution.
Strengthening CERT structures in Germany
Government and non-governmental computer emergency response teams
(CERTs) are single points of contact for technical prevention and response in the
field of IT security and are an important component of any sustainable cyber security architecture. They meet the need for information-sharing and coordination
at the IT expert level everywhere in the world. In Germany, the BSI serves as national CERT, with its CERT-Bund for the public administration; its services for
operators of critical infrastructures, the private sector and individual users; and as
single point of contact for CERTs in other countries. Other federal agencies have
independent CERTs, as do state-level public administrations, some businesses
and research institutions. These structures should be further expanded and connected in a network in the interest of national cyber security. The BSI will further
intensify cooperation within the network of federal and state CERTs and with the
business and research CERTs and will bring all the key actors together to im-
25