Navigation and service

The National Cyber Response Centre

[BILD]

The various complex threats to IT security pay no heed to the lines that separate the responsibilities of different security authorities. This means that none of these organisations can respond optimally to the dynamic threat landscape on their own. By facilitating a constant exchange of information among all the federal authorities with security responsibilities, the Cyber-AZ sets an ideal stage for effective prevention and defence measures against such threats.

The Cyber-AZ is a core element of Germany's Cyber Security Strategy (CSS), which succeeded 2005's National Plan for Information Infrastructure Protection in 2011 and included adjustments to the challenges of the new decade. The Cyber Security Strategy led to the establishment of the Cyber-AZ under the aegis of the BSI. This new organisation was then officially opened on 16 June 2011 by Hans-Peter Friedrich, the Federal Minister of the Interior at the time.

Just as the threat landscape has evolved since 2011, so has the Cyber-AZ itself. It has since developed from a simple information hub into a central cooperation platform.

This can mainly be attributed to the routines and products that have been devised to promote an increasing level of trust among the public authorities and employees involved. They have developed a sense of team spirit across their respective organisations and now operate in a highly integrated, targeted, and efficient manner within the framework of established processes -- be it in their daily situation meetings, working groups on specific topics, or joint appointments with those affected by cyber attacks.

On 1 September 2019, a series of fundamental changes took effect following the approval of new internal regulations for the Cyber-AZ. For the first time, all the public authorities involved committed to delegating on-site liaison officers to the Cyber-AZ. Their presence at the centre is now making it possible to increase the amount of situational products released by the Cyber-AZ. In addition, these officers are making it easier to share information and coordinate operative measures in response to urgent matters.

At the same time, the structure of the Cyber-AZ has been adapted to reflect that of similar cooperation platforms. The centre is now aligned with the model of the Joint Counter-Terrorism Centre (GTAZ), where the entities involved cooperate within the framework of their legally prescribed responsibilities without being subject to the supervision of a particular public authority. The role of director at the Cyber-AZ has also been replaced by that of a coordinator. As of 16 December 2019, the coordinator position is to be assumed by the BKA for a period of two years. The BKA is being supported in this regard by deputy coordinators from the Federal Office for the Protection of the Constitution (BfV) and the Cyber and Information Domain Service (KdoCIR) of the German armed forces. In terms of its physical location, the Cyber-AZ remains at the BSI, and thus in close proximity to the National IT Situation Centre, the National IT Crisis Response Centre, and CERT-Bund. The BSI also continues to provide IT infrastructure and personnel to the Cyber-AZ and its branch office.

At present, the organisations involved in the Cyber-AZ include the Federal Office of Civil Protection and Disaster Assistance (BBK), the Military Counterintelligence Service (BAMAD), the Federal Office for Information Security (BSI), the Federal Office for the Protection of the Constitution (BfV), the Federal Criminal Police Office (BKA), the Federal Intelligence Service (BND), the Federal Police Headquarters (BPOLP), and the Cyber and Information Domain Service (KdoCIR) as core authorities, along with and the Customs Investigation Bureau (ZKA) and the Federal Financial Supervisory Authority (BaFin) as associated offices.