Cyber security refers to the protection of IT systems, networks, data, and digital infrastructures against cyberattacks, data loss, espionage and sabotage. In Germany, the “IT-Grundschutz” framework developed by the Federal Office for Information Security (BSI) forms the foundation for a robust and sustainable information security management system (ISMS).

The IT-Grundschutz addresses technical, organisational, infrastructural and personnel aspects in equal measure. In an increasingly interconnected world, research depends heavily on the security of information and communication systems. Researchers and institutions must therefore understand potential risks and protective measures as fundamental components of institutional security: as numerous examples in Germany and Europe have shown, both the likelihood and potential impact of cyberattacks are extremely high.

Risks include:

• Phishing and social engineering: attempts to manipulate individuals into revealing sensitive information (e.g. through forged emails)
• Malware and ransomware: malicious software that infects or encrypts systems, often to extort ransoms
• Data loss and unauthorised access: caused by security vulnerabilities or weak access controls
• Hacker attacks and espionage: attacks by external or internal actors to obtain research or personal data
• Poorly secured cloud services and mobile devices: risks due to unprotected storage and remote working environments
• Vulnerabilities in software and networks: unpatched systems and insecure applications as entry points for attacks

We provide essential resources to help you protect your research. Explore our cybersecurity guidance now!

National support measures and information (examples)

Cybersecurity at European level