Guiding principles of the Cyber Security Strategy Germany must maintain its sovereignty and ability to function even in the digital age. Cyber security policy that is ready for the future will enable our country to take full advantage of the enormous opportunities and potential of the digital revolution to the benefit of all, by keeping the related risks under control. Ensuring freedom and security is a core task of the state, also in cyberspace. So it is also a task of the state to protect individuals and businesses in Germany against threats from cyberspace and to prevent and prosecute crime in cyberspace. In the digital age, the state can perform these tasks effectively for the long term only by offering businesses and individuals protection and freedom to develop also in cyberspace. To do so, the state must make sure its own systems are secure. In view of the potential for digital innovation, the state must recognize possible developments and their relevance for cyber security issues at an early stage based on the necessary risk analysis; it must also investigate possible new solutions and incorporate them into public policy. Cyber security results first of all from risk-appropriate behaviour and the use of secure systems in the operators’ and users’ area of responsibility. Many cyber attacks can be prevented with reasonable effort simply by taking tried and tested basic measures, such as consistently using risk-appropriate, effective and up-to-date security products and standards. Close cooperation and coordination is necessary to prevent, detect, identify, defend against and prosecute cyber attacks. Government, private industry, society and the research community all share responsibility for ensuring the security of cyberspace. They must therefore also coordinate their response to current challenges. Due to interdependencies and threats that often extend across national borders, close European and international coordination is essential from the perspective of foreign and security policy. As a result, the Federal Government’s cyber security policy in the coming years will set priorities in the following four areas of action: 7