ProSec Global
Industries / In focus
  • Federal government
  • States
  • Municipalities
  • Public administration
  • European institutions

Government & Public Sector

Government and public administration do not work like a corporation. Responsibilities are distributed, systems have grown historically and many institutions have to work together without being able to give each other instructions. Digitalization and security have to work under exactly these conditions – not only once they have changed.

Skills needs
The positions exist, the people to fill them often do not.
Digitalization
Funded projects set the pace, not the risk situation.
Confidentiality
Proceedings, deliberations and decisions must remain protected.
Social stability
A functioning administration is itself a security and economic factor.
What we encounter in this environment
„
You have the mandate, the requirements and the visibility. And you have more projects than can be implemented at the same time. So you prioritize. Because security rarely has a deadline, it loses out to everything that does: the budget, the election, the funding decision.
How we see it

That security loses out in prioritization is not due to individual roles, but to the structure in which they interact. Security only prevails once it is linked to what has a deadline anyway.

Typical framework conditions

What makes this environment challenging.

Regardless of day-to-day events, conditions apply in government and administration that last beyond electoral terms. This includes a dedicated, binding security benchmark, complemented depending on the task by the protection of classified information and by obligations from operating critical infrastructure. We encounter three patterns in this environment again and again.

Recurring patterns from our practice
01

Responsibility lies with many

The federal government, states, municipalities and independent institutions bear responsibility in different structures. Security therefore also has to work where no one can decide alone.

02

An incident quickly becomes a situation

A disruption in a public authority rarely remains an internal matter. It often develops a political dynamic of its own.

03

The protection requirement is fixed

The need for protection follows from the mandate and the applicable requirements. It remains in place even when other priorities demand attention at the same time.

Requirements that play a role
01BSI IT-Grundschutz
02NIS2 / BSIG for the federal administration
03State law & municipal requirements
04Protection of classified information / VS-NfD
05eIDAS / EUDI
06KRITIS, where applicable
On an equal footing

Your contact for Government & Public Sector.

Talk to someone who knows your environment.

A confidential conversation at leadership level. We assess your situation and also tell you if another address would be the right one.

Tim Schughart
Group CEO | ProSec Global