CERT@VDE

The first IT security platform in Germany for industrial companies

Industry 4.0 opens up significant opportunities and potential for value creation—especially for small and medium-sized enterprises (SMEs), which are the engine of growth. At the same time, as production systems become increasingly interconnected with modern ICT systems, the risk of cyberattacks is rising. This makes it all the more important to strengthen IT security as a critical success factor for Industry 4.0 and digitalization.

This is where CERT@VDE comes in: the first platform for coordinating IT security issues specifically for companies in the industrial automation sector. It offers manufacturers, integrators, plant builders, and operators in the industrial automation sector the opportunity for an intensive and trusting exchange of information, as well as concrete support on the topic of cybersecurity.

To CERT@VDE

While large international companies and institutions have their own CERTs (Computer Emergency Response Teams), many industrial companies lack the resources for specialized emergency response teams.

CERT@VDE is part of VDE e. V. and has no commercial interests. The basis for collaboration on the IT security platform is a confidentiality agreement, which is brought to life during regular working meetings and enriched by personal trust.

CERT@VDE: Synergies for Greater Security

Schlösser vor Bits zur Illustration von IT-Sicherheit

What is CERT@VDE?

CERT@VDE supports companies experiencing IT security incidents in the automation industry across organizational boundaries, within the same time zone, and in German.

CERT@VDE:

enables cross-vendor information exchange on a neutral, trustworthy, and secure platform while preserving anonymity
coordinates support for addressing security vulnerabilities
encourages the exchange of best practices
compiles and makes available vulnerability information tailored to specific target groups from various sources
organizes workshops for the automation industry
develops best practices in collaboration with its partners.

What are the benefits of CERT@VDE?

CERT@VDE enables its participants to engage in a direct and open exchange regarding the technology, tools, and methods they use, as well as security incidents.

The program encourages technical discussions on specific issues and problems, allowing participants to learn from how their partners address similar security challenges. This not only provides a comprehensive view of the challenges but also expands the toolkit for optimizing IT security.

The benefits of CERT@VDE at a glance:

Cross-company exchange on security issues
Reduction of IT security incidents through a knowledge advantage and a customer-specific situational overview
Prevention of production downtime and loss of know-how
Damage mitigation through rapid assessments and identification of response options for IT security incidents
Simple and customized access to relevant security information in one place (cockpit approach and single point of contact)
Reduction of additional IT security-related workload
Positive corporate image through collaboration and membership in CERT@VDE
Opportunity to help shape CERT@VDE processes through early support and participation.

What guidelines govern the work of CERT@VDE?

CERT@VDE is part of VDE e. V. and has no commercial interests. Cooperation on the IT security platform is based on a confidentiality agreement.

The following guidelines govern collaboration within the CERT network:

The confidentiality of customer data is a top priority.
Participation is voluntary and may be terminated at any time.
The business models of individual members must not be adversely affected by the activities of CERT@VDE.
Mutual contributions and information exchange are intended to optimize the workflows of all members.
The information and interests of other members are protected.
The work and collaboration are intended to serve as a model for other computer emergency response teams.

Who is backing CERT@VDE?

The VDE Association for Electrical, Electronic, and Information Technologies and the DKE (German Commission for Electrical, Electronic, and Information Technologies in DIN and VDE), which is supported by the VDE, are partners in safety and security.

The VDE is active in a wide variety of areas related to IT security and Industry 4.0:

VDE DKE Information Security Contact Point (KSI)
IEC 62443 series of standards “Industrial Communication Networks – IT Security for Networks and Systems”
Accompanying research for BMBF projects “Networked IT Security for Critical Infrastructures (VeSiKi)” and “Reliable Wireless Communication in Industry (BZKI)”
Research project “Data Security and Integrity in Electric Mobility During Charging and Billing in Compliance with Metrology Regulations (DELTA)”
Standardization roadmaps “IT Security” and “Industry 4.0”
Headquarters of the Industry 4.0 Standardization Council at VDE DKE
VDE certificate “Information Security Tested” from the VDE Institute.