Germany cybersecurity regulatory and defense developments

Germany is pursuing several initiatives to strengthen its cybersecurity capabilities and regulatory influence. At the European level, the German government is advocating for reforms to the Cybersecurity Act (CSA2), seeking to increase the decision-making authority of EU member states. Germany proposes that the European Commission use implementing acts rather than delegated acts to modify security objectives, arguing that national governments possess specialized expertise and that security objectives directly impact national security.

Domestically, Germany is focusing on expanding its technical expertise and agency capacity. A four-year framework agreement was established between the SANS Institute and the Federal Office for Bundeswehr Equipment, Information Technology and In-Service Support (BAAINBw) to provide specialized training in areas such as offensive security and incident response for personnel from the Bundeswehr, the Federal Criminal Police Office (BKA), and the Federal Foreign Office.

Additionally, the German government is discussing plans to expand the powers, personnel, and financial resources of the Federal Office for Information Security (BSI) while deepening cooperation between federal and state levels to improve responses to cyberattacks targeting municipalities.