The alleged perpetrator is caught, now the political process begins. Federal interior Minister Horst Seehofer (CSU) has presented as a first consequence, a number of measures to improve IT security. He announced an early warning system, in addition, an extended version of the IT is to be submitted to the security law nor in the first half of the year 2019.
"It can now be challenged so much; such cases can not be prevented," says Dennis Kenji Kipker. The information lawyer is a member of the Executive Board of the European Academy for freedom of information and data protection (EAID) in Berlin. "These are purely political demands, there were attacks similar to after the hacker at the German Bundestag in the year 2015."
especially Important is the prevention and awareness of specific users, such as politicians. "If you used an insecure password, bring so many laws and authorities."
"Total security, but there are not"
According to Seehofer, each self-supporting in the private sector, first of all, the responsibility for the secure handling of sensitive data. The BSI is but to enlighten even better in the future about the hazards of the network. "Total security does not exist but," said Seehofer.daily mirror tomorrow location for Free order
The interior Minister announced a uniform IT-security labels, as a result, IT should be made security for citizens. Another point is the certification, for example, of routers. According to an IT expert Kipker, there is already a voluntary certification for manufacturers of such devices. "A unified System is a start, but it could also suggest a complete safety for the consumers, the there are so." Previously, Minister of justice Katarina Barley (SPD) had called for a "Europe-wide valid security seal of approval". This should enable users to identify "trusted quotes" directly. With the Cybersecurity Act by the end of 2018 has been created a legal framework for it.
IT expert calls IT-security-related obligations for authorities
Dennis Kenji Kipker research in addition to his work in the EAID in the area of IT-security in critical infrastructures. This includes facilities that are of vital importance to the public welfare and whose failure would have serious consequences. "For these companies, there is in the IT security law, specific guidelines in dealing with data privacy and security." The staff must be specially trained cyber attacks must be reported. "It's not clear to me why such as banks and hospitals, authorities and administrations." Now is the right time, additional IT would be to define the security duties for public authorities and to define this as critical. Generally speaking, Germany is in a good position well to the topic of IT security. "We are a pioneer in Europe, which also changes due to the recent incident."