With a new position paper on current cybersecurity policy, eco – Association of the Internet Industry warns against the increasing tightening of security-policy interventions in the digital sphere.

Critical infrastructure such as data centres requires security concepts that go beyond traditional monitoring. In this interview, Georgij Sieloff, Executive Director of PSA Sicherheitsmanagement GmbH, explains why physical security, trained staff and measurable operational quality are crucial for resilient digital infrastructure.

The interim assessment of digital policy after just under a year of the German federal government’s tenure is mixed: in the eco Digitalpuls, the Association of the Internet Industry evaluates key digital policy initiatives across six areas of action. The results show that, despite initial progress, German digital policy still lacks impact.

Today, the German Federal Cabinet approved the draft bill for the German KRITIS Umbrella Act (KRITIS DG), paving the way for further parliamentary proceedings. ‘The KRITIS Umbrella Act is an important step towards greater resilience in Germany. However, it will only be effective if responsibilities are clearly defined and unnecessary duplication of work is avoided," Ulrich Plate comments.

The cabinet decision on the implementation of the NIS 2 Directive was announced today. This puts cybersecurity back on the political agenda – with tangible implications for companies in critical sectors. eco KRITIS expert Ulrich Plate explains the questions that remain unanswered in his latest assessment.

NIS2, CSA, CRA and e-evidence: eco's Competence Group on Critical Infrastructures (KRITIS) calls for clear, practical rules for digital resilience in EU cybersecurity policy.

Interview with Sascha Schimmler, Senior Manager Offensive Application Security DACH at NVISO Most companies have already established effective protective shields for their IT systems. In the field of operational technology (OT), however, the situation is often quite different. Realistically replicated test environments...

OT devices – and their security – urgently need to step out of the shadow of traditional business IT. After all, OT is now connected, vulnerable and business-critical. A rethink is needed: eco's Security and IoT Competence Groups have taken on this task and raised awareness of the issue with a dedicated event.

Cyber Resilience Act, Data Act, AI Act & Co: Which new requirements are relevant for IoT companies, what is behind the individual laws – and why it pays to understand regulatory objectives. The eco Competence Group IoT is here to guide you through the regulatory jungle. From data protection, data law and cybersecurity...

Following the withdrawal of US funding, the CVE project faces shutdown – a serious blow to the global cybersecurity infrastructure. Klaus Landefeld, Member of the eco Board, warns of the consequences and calls for a swift, coordinated solution.