German Companies Face Significant Preparedness Gaps Against Hybrid Attacks

A recent survey by the Digital Association Bitkom has revealed considerable concern among German companies regarding their vulnerability to hybrid attacks, including cyberattacks and sabotage amid escalating geopolitical tensions. While 59 to 60% of businesses believe they are likely targets, an alarmingly low 12% feel well-prepared to face such threats.

The survey, which gathered responses from 604 companies with over 10 employees, highlights critical sector vulnerabilities: 90% of firms see energy supply at risk, followed closely by financial services and telecommunications. Most companies expect hybrid attacks to cause serious crises in Germany, with 83% fearing significant disruptions and 74% attributing increased risk to Russia-NATO tensions. Furthermore, more than half anticipate a potential military confrontation within the next five years.

Operational resilience remains weak; companies on average can sustain operations for only 20 hours without internet access, and about 20 to 21% would have to cease operations immediately if connectivity is lost. Only 28% currently have crisis management plans, and just 10% perform regular crisis drills. Emergency power supply systems exist in only 20% of companies, although over half can employ alternative communication methods and 57% maintain data backups.

Bitkom President Dr. Ralf Wintergerst emphasized the urgent need to close the gap between awareness and protective action. He pointed to growing visible and covert attacks on infrastructures, noting that a previous power outage incident affected over 2000 companies — underscoring systemic vulnerabilities.

Despite these challenges, about 35 to 37% of companies plan to enhance their security investments soon, and the majority recognize the need for better crisis management and preparedness. There is also concern about potential personnel shortages due to civil or military service obligations amidst crisis.

Overall, the data underscores the critical need for German businesses to implement more robust defense and continuity strategies to withstand hybrid threats in the evolving geopolitical environment.