which are responsible for dealing with cyber security incidents. Up to now, the
BSI has only provided such assistance to law enforcement authorities.
In 2013, the IT Planning Council adopted a guideline for information security in
the public administration, which set a general standard for the IT security of all
agencies and institutions of the federal and state administration. The federal and
state governments have agreed to jointly defend against attacks on information
infrastructures of the public administration. To improve their joint situation report,
information-sharing between the federal and state levels on cyber attacks, which
has been voluntary up to now, will be subject to a binding agreement.
In addition, more attention will be given to cyber security at local government level, for example in modernizing baseline IT security and its recommendations
concerning organization, personnel, infrastructure and technical matters. The IT
Planning Council is a suitable forum for this effort. The Federal Government supports central state-level structures to promote cyber security at local level, for example by local IT service providers. In future, federal agencies will be able to
share more of their expertise with local governments via the federal states. The
BSI will draw up a situation report for the local level with the help of the federal
states and the national associations of local authorities.
Using resources, recruiting and developing staff
Cyber security costs money. In the coming years, major expenditures will therefore be necessary at federal, state and local level to keep Germany sufficiently
and permanently up to date in the area of cyber security.
Staff recruitment and development plays a key role in ensuring effective public
administration. The guideline of the IT Planning Council offers valuable information in this regard. It will be crucial to emphasize that the public service is an
attractive employer and to make targeted use of the existing pay and employment conditions for civil servants and other government employees. Government
must also work closely with training institutions. Cyber “clusters” where government, the private sector and the research community work together can be an
important factor for success in the competition for highly skilled workers. Staff re-
27