Geopolitical tensions are increasing, cyber attacks are becoming more sophisticated and dependence on non-European tech giants is steadily growing. In this context, the Bundesverband IT-Sicherheit e.V. (TeleTrusT) updated position paper Cyber-Nation Germany – a comprehensive strategy for Germany’s digital future that is both ambitious and pragmatic.
Vision of a resilient cyber nation
The vision of the “Cyber-nation of Germany", originally formulated by BSI President Claudia Plattner, goes far beyond technical security measures. It describes a society that counters the growing cyber threats ‘consistently, courageously and collectively’. The updated TeleTrusT position paper, which takes into account in particular the BSI position on technological sovereignty and geopolitical developments published in March 2025, defines six key objectives:
- Putting cyber security on the agenda
- Increase Cyber Resilience Significantly
- Use technology competence in a targeted manner
- Consistently advancing digitalisation
- Make cyber security pragmatic
- Building a thriving cyber market in Germany
Seven concrete demands on politics
The position paper formulates seven key demands that provide a clear framework for policymakers to act:
1. Clear commitment to unrestricted IT security
Germany must finally commit itself ‘clearly and unwaveringly to comprehensive IT security’. This includes a holistic view of IT security architectures and a value-based approach that strengthens trust between citizens, businesses and governments.
2. Harmonise European IT security laws
The current legal landscape is fragmented and creates legal uncertainty. TeleTrusT calls for consolidated European IT security legislation that creates uniform standards, particularly in the field of ‘state of the art’, and does not overwhelm SMEs.
3. Ban backdoors and weakened encryption
Particularly relevant in times of state surveillance debates: Germany must not cause the weakening of IT systems through legal obligations. ‘A government-motivated weakening of cryptography or the desire for backdoors must be definitively rejected.’
4. Systematic expansion of IT security infrastructures
From rapid NIS 2 implementation to European Digital Identity (EUDI wallet) and alternative cloud capacity strategies: Germany needs to make its IT security infrastructure holistic and resilient.
5. Strengthening ‘Made in Germany/EU’ in the area of cybersecurity
Targeted funding programmes for domestic IT security companies, better procurement rules for SMEs and start-ups as well as a trust seal "IT Security made in Germany/EU" are intended to strengthen digital sovereignty.
6. Digital sovereignty without self-sufficiency
TeleTrusT's approach to digital sovereignty is particularly innovative: Instead of complete foreclosure, ‘control layers’ are required, which also oblige international cloud providers to integrate national security anchors. Cryptographic procedures, European instantiation and control of the update channels should enable self-determined use.
7. Pragmatic cyber security
Security by design must become standard, but always in balance with user-friendliness. There is no absolute certainty – therefore residual risks must be accepted and the right balance found.
From patchwork to holistic strategy
A central point of criticism of the position paper: “Currently, in the context of cyber security, there are too many individual initiatives that have little or no impact.” Instead, a coordinated implementation strategy with a clear division of tasks between politics, administration, business, research and society is needed.
Particularly interesting is the proposal for a European CVE database as an alternative to the US vulnerability database – a concrete example of technological sovereignty without self-sufficiency.
Participate and help shape
The implementation of the cyber-nation Germany is a joint task. On 1 August 2025 invites TeleTrusT to the online meeting of the Cyber Nation Working Group“ one. Here, experts from industry, administration, consulting and academia can play an active role in shaping further strategy development.
Conclusion:
Ambitious, but doable! The TeleTrusT position paper on the cyber nation of Germany is more than just another strategy paper – it is a pragmatic roadmap for digital sovereignty. The balance between technological independence and international cooperation, between security and user-friendliness, between state control and market mechanisms shows: A defensive cyber-nation Germany is ambitious, but feasible.
The time to act is now, because geopolitical developments are not waiting for perfect strategies.
The complete position paper “Cyber-Nation Deutschland” V 2.0 is on the TeleTrusT website and in first paragraph of this Article Ready to download.
Dates:
- 1 August 2025: TeleTrusT-AG Cyber-Nation online meeting – Registration and further information on the TeleTrusT website
EN 
DE 
ES 
FR 
IT