Allianz für Cyber-Sicherheit (ACS): Coordination in Cybersecurity in Germany

While cybersecurity maintains its critical position in a digitalising world, effective coordination plays a vital role in ensuring security. Germany aims to protect itself against cyber threats by establishing strong coordination and cooperation in this field.

Leading Institutions in the German Cybersecurity Ecosystem and Their Roles

The main institutions active in cybersecurity in the country are the following:

1. Bundesamt für Sicherheit in der Informationstechnik (BSI): As Germany’s national cybersecurity authority, the BSI is responsible for protecting critical infrastructure. It sets security standards, develops measures against cyber threats and raises awareness. [1]
2. Allianz für Cyber-Sicherheit (ACS): Founded in 2012 as a partnership between the BSI and Bitkom, the ACS aims to strengthen public-private cooperation. This structure seeks to increase cybersecurity through information sharing between companies and institutions. [2]
3. Zentrale Stelle für Informationstechnik im Sicherheitsbereich (ZITiS): It provides technical support to security agencies and develops solutions in digital forensics and cryptography. [3]
4. Computer Emergency Response Team für Bundesbehörden (CERT-Bund): The incident response team for cyber incidents affecting public authorities. It analyses security vulnerabilities and responds quickly to cyberattacks. [4]

The BSI and the ACS: Tasks and Cooperation

The BSI plays a central role in Germany’s cybersecurity ecosystem. It detects and analyses cyber threats and provides guidance to the public and private sectors.

The ACS, as an initiative of the BSI, offers a platform for businesses and civil society organisations (NGOs). The main aim of the ACS is to increase cyber resilience by encouraging information sharing. Through the events it organises and the resources it provides, this platform raises awareness.

The BSI sets and supports the basic strategic framework of the ACS. By applying the standards set by the BSI, the ACS acts as a bridge to businesses and other institutions. Cooperation with NGOs and the private sector in particular stands out as an important part of this relationship.

The ACS and Non-Profit Organisations

By working with NGOs and associations, the ACS aims to build broad social resilience in cybersecurity.

In this context:

• Awareness campaigns: By organising events involving NGOs, it helps provide cybersecurity training for small and medium-sized enterprises.
• Information sharing: By sharing up-to-date information on cyber threats and countermeasures, it helps businesses be better prepared.
• Networking: It aims to encourage the exchange of knowledge and experience by bringing together stakeholders from various sectors.

Options for Cooperation with the ACS

There are several ways to get involved with the ACS in Germany. These options and what each of them means are explained below:

1. Participant (Teilnehmer): Companies, institutions or NGOs can join the ACS as official members. Membership offers regular information sharing, participation in training and the opportunity to cooperate directly with other stakeholders in the ACS network.
2. Partner: Partners are organisations that support the ACS’s strategic projects and initiatives. They can contribute, for example, by sponsoring awareness campaigns or providing technical expertise.
3. Multiplier (Multiplikator): Multipliers are intermediary organisations that bring the ACS’s knowledge and resources to wider audiences. Local NGOs, associations or chambers of commerce, for example, increase cybersecurity awareness by passing ACS content on to their members.
4. Contribution through expertise: Organisations with technical knowledge or sector expertise can contribute by providing content for ACS publications and training materials.

Contributing to the ACS Network

As part of the ACS, one can help strengthen the network in the following ways:

• Information sharing: Organisations can share case examples of cyber threats they have encountered, and proposed solutions, on the ACS platform.
• Training and seminars: By organising training in their own areas of expertise, they can raise the awareness of other stakeholders.
• Joint projects: By taking part in events and projects organised by the ACS, they can help the network grow.
• Cooperation with local communities: Local networks can be used to help the ACS achieve its goals.

The event formats and content offered by the ACS in this context can be listed as follows:

Cyber Security Days (Cyber-Sicherheitstage): An in-person forum bringing together up to 200 participants, with expert presentations from different perspectives and networking opportunities. At the Cyber Security Days forum, held for the 36th time last year, sessions are devoted to a current topic chosen each year.

Cyber Security Web Talks (Cyber-Sicherheits-Web-Talks): Held as online seminars, these events aim to help participants learn about current cybersecurity topics and get in touch with experts.

Exchange circles (Erfahrungskreise, ERFA-Kreise): Working groups with broader participation that focus on sharing information on specific topics and developing joint solutions.

Expert circles (Expertenkreise): Closed groups open to a limited number of participants by invitation only. They focus on producing academic and sector-specific outputs. [5],[6],[7],[8]

In Germany, cybersecurity is strengthened through the cooperation not only of state institutions but also of the private sector and civil society organisations. The BSI and the ACS play a critical role at the centre of this cooperation. The work the ACS carries out together with associations and NGOs makes a major contribution to raising public awareness and to building a safer digital ecosystem overall.