Evolution of Germany’s cyber security policy from 2011 to 2024

Abstract

The purpose of the article is to show the scope and process of evolution of Germany’s cybersecurity policy in the context of recommendations being developed by EU institutions. It shows that Germany’s digital resilience is achieved through the correlated actions of the state’s federal bodies and actors using ICT systems and networks, especially from the spheres of business, science and education. In its creation, the recommendations of EU institutions are taken into account, which are one of the legal and organizational elements that allow the creation of a system to ensure a certain level of cyber security. The solutions adopted are fully in line with the EU cyber security strategy, which allows the German state to co-create the EU policy in this area. This is especially true of the efforts to implement the NIS 2 Directive. In contrast, the German state does not intend to get involved, and in fact seeks to limit the scope of potential Community offensive ventures of a political-military nature, even if they were to be adopted as pre-emptive measures.