which are responsible for dealing with cyber security incidents. Up to now, the BSI has only provided such assistance to law enforcement authorities. In 2013, the IT Planning Council adopted a guideline for information security in the public administration, which set a general standard for the IT security of all agencies and institutions of the federal and state administration. The federal and state governments have agreed to jointly defend against attacks on information infrastructures of the public administration. To improve their joint situation report, information-sharing between the federal and state levels on cyber attacks, which has been voluntary up to now, will be subject to a binding agreement. In addition, more attention will be given to cyber security at local government level, for example in modernizing baseline IT security and its recommendations concerning organization, personnel, infrastructure and technical matters. The IT Planning Council is a suitable forum for this effort. The Federal Government supports central state-level structures to promote cyber security at local level, for example by local IT service providers. In future, federal agencies will be able to share more of their expertise with local governments via the federal states. The BSI will draw up a situation report for the local level with the help of the federal states and the national associations of local authorities. Using resources, recruiting and developing staff Cyber security costs money. In the coming years, major expenditures will therefore be necessary at federal, state and local level to keep Germany sufficiently and permanently up to date in the area of cyber security. Staff recruitment and development plays a key role in ensuring effective public administration. The guideline of the IT Planning Council offers valuable information in this regard. It will be crucial to emphasize that the public service is an attractive employer and to make targeted use of the existing pay and employment conditions for civil servants and other government employees. Government must also work closely with training institutions. Cyber “clusters” where government, the private sector and the research community work together can be an important factor for success in the competition for highly skilled workers. Staff re- 27

Select target paragraph3