Germany to harden critical infrastructure as Russia fears spike
Sign up now: Get ST's newsletters delivered to your inbox
Power utilities, water companies and even some supermarket chains will be required to reduce their vulnerability to terrorism, industrial accidents, natural disasters and public health emergencies.
PHOTO: AFP
- Germany passed a law to better protect critical infrastructure against threats like sabotage amid rising tensions with Russia.
- The law requires essential service providers (energy, water, food etc.) to improve security, risk assessments and incident reporting.
- Experts say full protection isn't possible; resilience and redundancy are key, making them as important as military strength.
AI generated
BERLIN - Germany plans to better protect its critical infrastructure with a law passed on Jan 29 as surging tensions with Russia stoke fears of sabotage attacks and other national security threats.
Parliament voted for legislation requiring power utilities, water companies and even some supermarket chains to reduce their vulnerability to terrorism, industrial accidents, natural disasters and public health emergencies.
“Germany is not at war, but we are the target of hybrid warfare – sabotage, espionage, aggression by foreign powers, terrorism,” Interior Minister Alexander Dobrindt told fellow lawmakers ahead of the vote.
“We have a responsibility to ensure that we implement resilience measures.”
The package, which aims to bring Germany in line with European Union directives, would oblige some 1,700 essential services providers to step up physical security and alarm systems, carry out regular risk assessments and promptly report incidents.
The measures cover facilities that provide critical services to at least 500,000 people in sectors including energy, water, food, health, transport, IT, telecommunications, financial services and waste disposal.
A wake-up call came weeks ago in Berlin when a mid-winter arson attack
The attack, which sparked public fury amid a slow response, has led the government to offer a €1 million (S$1.5 million) reward this week for tips leading to arrests of the culprits, who called themselves the “Vulkangruppe” (Vulcan Group).
Information about such infrastructure should no longer be so easily available to the public, Mr Dobrindt said, calling for a shift from “transparency towards greater resilience”.
Many security experts have welcomed the new critical infrastructure Bill in principle, but others have harshly criticised it as too little too late.
Greens MP Konstantin von Notz, a security expert, told AFP that the government’s response to the mounting threats had been “wholly inadequate” and that the new package is “far too late and too poorly crafted”.
“We remain miles away from the urgently needed uniform protection of our critical infrastructures.”
‘Geopolitical threats’
Europe’s top economy, home to more than 83 million people, is a strong military supporter of Ukraine in its war against Russia and a central hub for NATO forces on the continent.
After decades of stability following the end of the Cold War, it is now scrambling to rebuild its military to deter Russia – but also to improve resilience on the home front.
Defence Minister Boris Pistorius warned on Jan 27 of “the increasing number of hybrid attacks in many European countries, with critical infrastructure being targeted at the click of a mouse, data cables being cut in the Baltic Sea, drone-based espionage and media disinformation campaigns”.
Private companies and the broader economy are also “feeling the direct impact of these geopolitical threats and risks in supply chains, energy supply and cyber security”, he said.
Under the new law, operators of critical facilities will have to report incidents to Germany’s Office of Civil Protection and Disaster Relief within 24 hours and follow up with a detailed report within one month.
They will also have to conduct training, exercises and awareness-raising for staff.
Business groups have complained they will face cumbersome new reporting duties and hefty fines for non-compliance.
The new law also calls for better protecting sensitive data such as maps of power grids that are now published online, to prevent malicious actors from using them to exploit vulnerabilities.
‘As important as tanks and drones’
The Berlin blackout illustrated the cascading effects of infrastructure outages, as mobile networks, district heating and even local train services all went down.
Mr Daniel Hiller, who works on security and resilience at the Fraunhofer Institute for High-Speed Dynamics, said modern systems are “so large, so complex and so interdependent” that it’s essentially impossible to fully secure them against all threats, making planning for contingencies and back-up alternatives an important part of civil defence.
“Anyone who claims that 100 per cent protection is possible is pulling the wool over people’s eyes.”
Ms Sabrina Schulz, Germany director at the European Initiative for Energy Security think-tank, agreed that “you can’t prevent everything – so it’s more about redundancy than fortifying existing infrastructure”.
Chancellor Friedrich Merz has now vowed to turn Germany’s army into Europe’s largest conventional force, but Ms Schulz said building infrastructure resilience is “at least as important as tanks and drones, if not more so”. AFP
