Public sector cybersecurity: reliably protecting citizen services

The situation: many services, few staff

Online services, specialist applications, school and public networks, external service providers: the attack surface of public administrations is large and distributed. At the same time, skilled staff are in short supply. It is therefore crucial to invest effort where the risk is highest – not where the most findings are listed.

Legal framework: NIS2 and IT-Grundschutz

In Germany, federal administration bodies are subject to their own obligations under the NIS2 Implementation Act; for state and local administrations, the federal states set the requirements. Regardless of this, BSI IT-Grundschutz – the baseline protection methodology of the Federal Office for Information Security – is the benchmark for an information security management system in many administrations. Its foundation is an up-to-date inventory, a defined process for handling vulnerabilities and the detection of incidents.

What XMfortress contributes

• Surface finds reachable systems – including those that service providers or departments run without coordination.
• Vuln sorts vulnerabilities by actual risk and assigns deadlines.
• Detect condenses events into a few understandable incidents – a good fit for small teams.
• Gate separates networks, such as administration, school and public networks.

Procurement and sovereignty

For public-sector buyers, traceable sources of supply and data storage in the EU are what count. XMfortress Gate is developed in Europe; we provide technical data sheets and supply chain documentation for public tenders.