NKCS THEMATIC WORKSHOP Turning Point – Strengthening the Cyber Defense Industry

^{This article has been machine translated. You can find the original article in German here.}

Following this year's CODE annual conference, the NKCS thematic workshop “Turning Point – Strengthening the Cyber Defense Industry” took place on July 10, 2025, at the University of the Bundeswehr Munich, led by the DLR Project Management Agency and the CODE research institute.

The geopolitical situation is becoming increasingly threatening, former trading partners are attacking our democracy, and allies are renouncing their friendship with us. Germany and the European Union have recognized the signs of the times and are investing more heavily in security, defense, and, above all, sovereignty. For this reason, the National Coordination Center for Cybersecurity Germany (NKCS / NCC-DE) held this thematic workshop with experts to discuss how we could better position Germany and Europe in the field of cyber defense and establish them as serious players. The key questions revolved around how cyber defense would need to develop in light of the geopolitical situation, what it would take for Germany and Europe to take on leading roles, and where the experts would see our situation in 2030.

Brigadier General Dr. Volker Pötzsch provided insights into the current situation from the perspective of the German Armed Forces in his keynote speech on “Threats and Challenges Facing the German Armed Forces in the International Environment.” He made it clear that we find ourselves in a rapidly changing security policy environment and that we must switch from a purely “reactive” mode to a “proactive” mode as quickly as possible. This becomes particularly essential when we deal with the topic of critical infrastructures, in which a multitude of fields (including government & administration, transport & traffic, health, finance, information technology & telecommunications, and media & culture) are interconnected, similar to an orchestra that is supposed to play a melodious score. If all the instruments are well tuned and the participants work well together or coordinate through the exchange of information and knowledge, we can also deal with threats in cyberspace and the information space (including cognitive warfare and digital footprints) together. We can only actively shape this score together!

Heinz-Georg Schmitz (Bosch Engineering GmbH) provided impetus from the industry in his presentation “Cyber Security – Status and Solutions in the Automotive World.” It became clear that security in this area has a wide variety of aspects: (1) Security can be a showstopper, namely when it comes to compliance with non-negotiable regulations (e.g., UN R155, ISO/SAE 21434). (2) However, security can also be an enabler when it comes to expanding vehicle functions (including driver assistance and comfort). (3) Security can also entail risks when you consider how interconnected the systems are, making the vehicle increasingly attractive for cyberattacks. (4) Security is and remains a brand promise. In summary, security in the automotive industry must be viewed holistically – as a regulatory necessity, as a driver of innovation, as protection against evolving risks, and as a core element of brand trust.

These two keynote speeches kicked off the active part of the workshop for the approximately 40 participants from industry and research. In World Café Style – Round 1, a wide range of questions were discussed regarding the status quo in the German cyber defense industry, the strengths and weaknesses of the German industry and research, and how we compare to other countries in Europe and around the world. In the first step, topics and aspects were collected, which were then sorted and grouped in the next step before the participants prioritized them. Variety and a change of perspective were achieved by rotating between the different tables after each step. This allowed all participants to be confronted with the questions, learn about the thoughts of others, and then prioritize from their own perspective.

Specifically, the following points were identified in Round 1 as areas in urgent need of optimization: (1) Increasing risk tolerance – the proof of the pudding is in the eating, let's see what comes out instead of what speaks against it; (2) Minimizing regulatory fragmentation, bureaucracy, and dependencies (including electronics, software, and hyperscalers); (3) Strengthening small and medium-sized enterprises, innovation transfer, and support between TRL transitions; (4) Creating understanding of cyber defense at all levels.

In round 2, the groups were reorganized and, as before, questions about the future-oriented development of the industry were addressed in three steps: Where do you see the industry in 2040? What can the state and the armed forces do to strengthen the industry? What prospects do European partners offer? Regardless of which area the participants in the groups came from, it became clear that they all consider the same aspects, face similar risks, and that the exchange of information and experience is essential to counter threats and that the cyber defense industry can only be strengthened through joint efforts. Using the key questions and findings from round 1, round 2 produced concrete proposals for ushering in a new era, covering aspects such as: (1) closer cooperation between the state, industry, and research organizations; (2) minimization of dependencies; (3) consolidation of common requirements and standards; (4) alliance within the country to provide a global counterweight; (5) Establishment of a professional career path for cyber defense with close exchange between civil and military sectors; (6) Creation of transparency and a central, common interest in cyber.

All in all, security and defense are and will remain inextricably linked and are becoming increasingly multifaceted. Only by working in harmony and engaging in continuous dialogue can we play a harmonious score that can cope with the many short-term disruptions and/or failures that occur in this complex environment. Only together are we strong and can we strengthen the cyber defense industry!

This realization led to a “juggling of business cards,” the continuation of many discussions, and the discovery of many commonalities. All of this will be continued in the coming months through further workshops of this kind. After all, a network must and can grow and can also exert influence at higher levels (e.g., committees or the EU), thereby changing the research and development landscape in the field of cyber defense!!

Agenda: https://www.nkcs.bund.de/de/veranstaltung/nkcs-themenworkshop-zeitenwende-cyber-defense-branche-staerke

^{Photos: © FI CODE / C. Schmitt}