Cyber-attacks, drones, sabotage of cables – targeted disruptions to digital services and applications have become a strategic tool for exerting geopolitical pressure. The panel discussion “Digital Infrastructure Under Pressure: Resilience and Crisis Management in Times of Hybrid Threats” examined how well Germany is prepared for such attacks and how the interaction between the state, the private sector and public authorities functions.

“We face a vast spectrum of threats, ranging from simple hackers and far-left extremist groups to hybrid attacks from Russia, right through to services influenced by political decision-makers, such as in China and the US,” says Thomas Jarzombek, Parliamentary State Secretary at the Federal Ministry for Digital and State Modernisation. “We must protect ourselves.” He advocates for greater independence in AI data centres and satellite technology, for example through European products, start-ups and open-source technologies. The state and industry must work together to strengthen the IT sector.

Clear procedures and command structures

Mobile network operators also form part of critical digital infrastructure. For Dr Marcus Hacke, Director of Marketing & Products Business at Vodafone, preventative measures are a key factor in dealing with threats. These include training, regular drills, and clearly defined procedures and crisis management teams. “But crises also require clear command structures. There is still room for improvement in politics, among the authorities and amongst operators of critical infrastructure,” said Hacke. AI has greatly increased the attack surface, and it is the responsibility of every company to invest in cybersecurity.

“Most crises occur because solutions have not been patched. If I don’t have a vulnerability in the software, AI can’t get in either,” says Dr Philipp Trinius, CTO at Deutsche Telekom Security GmbH. Companies must take operational security seriously. And – this is the good news – “we can use AI just as the attackers do to detect and prevent cyber-attacks”.

Everyone must be prepared

IT security is one aspect, says Dr Christoph Hübner, President of the Federal Agency for Digital Radio for Authorities and Organisations with Security Tasks (BDBOS). However, it is also essential to be able to trust staff. “The human risk factor is always present. Whether in public administration or in the private sector, everyone must realise that security serves us all,” says Hübner.

For State Secretary Jarzombek, the change in mindset is crucial: “We must wake up from our naivety. Yes, it’s about protecting critical infrastructure, but every household, every camera can be a weapon against others and against oneself. We no longer live in the peaceful world we still believed ourselves to be in ten years ago. Every single person must be prepared.”