[REVISION HISTORY]

German firms' cloud adoption & rising hybrid threats

Updated 10 times since CLSTR started tracking revisions of this situation.

What changed

2026-09-05 07:51 UTC → 2026-09-12 22:29 UTC · added ~~removed~~

German firms continue to prioritize digital sovereignty, often accepting higher costs and complexity to maintain data control and reduce dependence on global hyperscalers. A Plusserver study found 71.1% of respondents view digital sovereignty as business-critical, though 59% of companies report that technical challenges like data migration prevent them from switching providers. This shift is driven by IT security, cybersecurity, and regulatory frameworks such as NIS2 and DORA, which push sectors like finance and healthcare toward data residency and architectural sovereignty. To manage these threats, German, Austrian, and Swiss SMEs are increasingly outsourcing to external providers. According to the ‘Stand der IT-Sicherheit 2026’ study, companies are opting for managed services, such as Managed Detection and Response (MDR), due to rising risks and internal resource shortages. Despite this outsourcing trend, internal expertise is improving, with the proportion of organizations possessing specialized security staff rising from under 50% in 2023 to over 70% in 2026. The threat landscape is expanding into hybrid warfare. A survey by the Institut der deutschen Wirtschaft (IW) involving 1,041 companies reveals that one in five German businesses is experiencing the effects of hybrid threats from abroad, including cyberattacks, espionage, sabotage, and disinformation campaigns. Large companies with more than 250 employees report being more frequently targeted, with the information, communication, energy, and water sectors facing the highest risks. While IT security investments have increased, the IW notes a lack of preparedness regarding energy supply security and emergency plans for critical infrastructure. Siemens Energy CEO Christian Bruch has called for a civilian operations plan to protect essential services like electricity, water, and food supplies to ensure a coordinated response during crises. Adding to the complexity of digital sovereignty, privacy advocate Max Schrems has warned that the physical location of data centers may not guarantee protection from foreign surveillance.

Versions

Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.