Further, a broader portfolio of qualified, trustworthy service providers is needed, for example for IT security solutions, forensics, and attack detection and response. Here too users should be able to rely on a broader range of service providers. The Federal Government provides support for IT companies through special research programmes. In joint projects with universities, research institutes and other private-sector partners, they develop innovative approaches for new products and services. Working with providers Working with providers plays a key role. In the framework of current law, this is especially true of provider activities to detect cyber threats, deal with known incidents/infections and reduce the impact of ongoing attacks. One effective option for improving data security on the Internet in general is to increase the use of sensors, in compliance with data protection regulations, to detect anomalies. The findings should be anonymized or pseudonymized to protect the rights of data subjects. Getting providers of IT security services involved At a time when skilled IT workers are in short supply, government and the private sector have an interest in encouraging the mutual exchange of IT expertise and the creation of expert networks. In the framework of applicable law, private providers of IT security services will be more involved in case of need than in other areas of government activity. The Federal Government will therefore take targeted advantage of possibilities to promote skilled and trustworthy IT security service providers. It will also work with representatives of Germany’s IT security industry to develop and carry out staff exchange programmes in the field of cyber security. In doing so, protecting government confidentiality and official secrecy is just as important as protecting trade secrets. Creating a platform for sharing information on the basis of mutual trust The cooperative approach also includes intensive information-sharing. For this purpose, the Federal Government will institutionalize a cooperation platform for government and the private sector; within the predefined legal boundaries, this 18

Select target paragraph3