In the recent past, we have seen companies facing major challenges due to the coronavirus pandemic, among other things. Digitalization and the rapidly increasing use of digital technologies are currently making a major contribution to the restructuring of corporate processes. In turn, the sharp increase in networking presents companies with additional challenges. Although awareness of requirements and measures in the context of information security is growing continuously, there is still a need to catch up, particularly due to digital progress and the increasing threats posed by cybercrime. According to the digital association Bitkom, the damage caused to the German economy by cyber attacks is increasing drastically from year to year and, according to the latest survey, amounts to 220 billion euros annually.

Challenges and goal

All companies are affected by this, but small and medium-sized enterprises (SMEs) are particularly struggling with the challenges of information security due to a lack of resources, know-how or awareness. There is a lot of information available for companies, for example in the form of standards, but the content is usually too complex and not adapted to the needs of SMEs.

The GrundschutzPlus Aktivator project aims to increase the IT security level of production-related SMEs and remove barriers to the implementation of IT security measures. To this end, an interactive platform is being created that will enable SMEs to make competent IT security-related decisions themselves and strengthen their understanding of security issues. SMEs receive IT security information specifically tailored to their company and assistance with implementation.

The basis is the recording of the specific IT security requirements of SMEs. For this purpose, an interactive, dialog-based survey of requirements formulated in the language of SMEs is implemented. The platform leads through a dynamic dialog until all relevant information has been recorded and transfers this into a simplified model of the company. An IT security model is developed on the basis of existing standards and suitable resilience and protection measures are identified. On this basis, the GrundschutzPlus activator platform develops an IT security concept tailored to the company. Implementation is supported by sample implementations, step-by-step instructions and templates. As a result, companies become more secure when planning and implementing digitalized processes and business models and the competitiveness and innovative capacity of SMEs is strengthened.

Implementation of the project

The Center for Mechatronics and Automation Technology ZeMA and the Fraunhofer Institute for Intelligent Analysis and Information Systems IAIS are responsible for implementation. In order to create a platform that is optimally adapted to SMEs, feedback from SMEs will be collected in workshops during the project. This then flows directly into the further development process of the platform. The Mittelstand 4.0 Competence Center Saarbrücken and the IT Security Transfer Office act as networkers for the SMEs. The GrundschutzPlus Aktivator project is part of the "IT Security in the Economy" initiative within the SME Digital funding priority. Further information on the project and information on the planned workshops can be found here.

With its SME 4.0 competence centers, the "IT Security in Business" initiative and "Digital Now", the SME Digital Network offers comprehensive support for digitalization. Small and medium-sized enterprises benefit from concrete practical examples and tailor-made, provider-neutral offers for qualification and IT security. The Federal Ministry for Economic Affairs and Energy enables free use and provides financial subsidies.

Further information can be found on the websites http://www.mittelstand-digital.de and http://www.it-sicherheit-in-der-wirtschaft.de.

Christian Siegwart (ZeMA), Felix Scherhag (ZeMA), Kai Pervölz (IAIS), Prof. Dr.-Ing. Georg Frey (ZeMA)