Action area 1: Remaining safe and autonomous in a digital environment A cornerstone of cyber security is the ability to be safe and in control in a digital environment. Individual users, businesses, government and others in Germany must be able to understand and assess the opportunities and risks involved in using information technology and to adjust their behaviour accordingly (ability to assess). For them to do so, trustworthy technologies and conditions must be available. The possibility to be safe and in control in cyberspace lies within the context of technological or digital autonomy. It is based on targeted digital education for all ages and types of users. To counteract digital carelessness, awareness of cyber security must become firmly anchored in society. In order to take advantage of what digitalization offers, all user groups must be able to access trustworthy and secure IT systems, thereby reducing their digital vulnerability. An important part of this is user-friendly and practical solutions – also those made in Germany – based on globally applicable technical architecture. So are targeted IT security research and development, needs- and user-based certification policy, support for secure electronic identities and encryption of both electronic communications and of services offered via the Internet. National regulations should be revised as necessary in line with current security needs. At the same time, the Federal Government will continue to work in the European Union and in international organizations on behalf of appropriate and uniform IT security standards and effective legislation. 9