German Companies Struggle With Preparedness Against Internet Outages and Hybrid Threats

A recent survey conducted by the Digital Association Bitkom reveals significant gaps in the crisis preparedness of German companies facing internet outages and hybrid threats amid escalating geopolitical tensions. The survey included 604 companies with at least ten employees and highlights critical vulnerabilities and a widespread lack of readiness.

According to the survey, the average German company can only maintain operations for about 20 hours without internet connectivity; 21% of firms would have to cease operations immediately. Only 8% can manage to function beyond 48 hours of outage. The energy supply sector is deemed most vulnerable, with 90% of companies identifying it as a critical risk, followed closely by the banking and insurance sectors (89%) and water supply (77%).

The looming risk of hybrid attacks intensifies given that 74-83% of surveyed companies anticipate a higher threat level linked to ongoing Russia-NATO tensions, with 53% considering a potential military conflict possible within the next five years. Despite 59% believing their organizations could be targets of such attacks, only 12% assess their preparedness as good, while nearly 80% admit to poor overall readiness.

Corporate management recognizes the significance of hybrid threat protection, with 61% prioritizing it, though 35% have yet to implement adequate safeguards. Protective measures vary widely; 58% have alternative communication options, 57% perform data backups, but only 20% maintain backup power supplies. The potential shortage of personnel for civil defense roles adds to operational concerns.

Security authorities face criticism from companies, as only 22% feel sufficiently informed or supported. Companies are calling for stronger governmental involvement, including the introduction of mandatory security standards (supported by 79%), increased funding programs (68%), and public education campaigns on hybrid threat response (71%). Bitkom President Dr. Ralf Wintergerst emphasized that hybrid attacks — situated between war and peace — are a real and escalating threat demanding enhanced resilience and protection of sensitive infrastructure data.

In summary, the survey underscores urgent needs for improved cyber and hybrid threat resilience among German companies, stronger communication from security agencies, and concrete political measures to safeguard critical sectors against potential disruptions escalating from current geopolitical risks.