What happened? – An overview of the 21st German IT Security Congress
Under the motto "Cybernation Germany: together, secure, digital", the German Federal Office for Information Security (BSI) brought together around 8,000 participants from industry, public administration and academia on 15 and 16 April for the 21st German IT Security Congress. At the centre of the discussions was the secure use of artificial intelligence – a topic that is gaining importance in light of the rapid development of chatbots and AI agents.
Alongside AI security, congress participants addressed further key future topics: quantum-safe cryptography, zero trust architectures, secure digital identities and the implementation of regulatory requirements such as NIS-2. Particular emphasis was placed on the user-centred design of IT security.
The details – Core topics and discussion priorities
AI security as a central topic
The experts examined in depth the question of how AI systems can be secured. In concrete terms, this covered the development of security concepts for the use of artificial intelligence, the early detection of risks and compliance with regulatory requirements. These challenges apply to businesses as well as to public administration, which is increasingly relying on AI-based solutions.
The human factor in IT security
A particular focus was on how human behaviour can be more strongly integrated into security concepts. The goal: to design IT security around users and to understand people as an active part of the security architecture. This approach acknowledges that technical security measures alone are not sufficient and that people must be regarded as a central factor in the security chain.
Award for young talent
The congress also saw the presentation of the Best Student Award, which has recognised young talent for 25 years. This year the award went to Yasin Bachiri for his congress contribution on the cybersecurity risks of generative AI models. The jury praised his ability to explain complex subject matter clearly and in a way that is accessible to a broad audience.
Context – Why these topics matter now
The thematic priorities of the BSI congress reflect the current challenges of the IT security landscape. The rapid development and spread of AI systems brings new security risks that challenge previously established protection concepts. At the same time, regulatory developments such as NIS-2 show that legislators are responding to growing cyber threats and demanding higher security standards.
BSI President Claudia Plattner underlined the importance of a holistic approach: "Digitalisation does not work without IT security, and vice versa." This statement makes clear that security must not be understood as a downstream add-on but as an integral part of digital transformation.
Federal Minister of the Interior Alexander Dobrindt added a societal perspective: "In times of growing uncertainty we must become more resilient." The BSI acts as a "patron, point of contact and helping hand" for government, industry and society.
Practical tips – Concrete fields of action for companies
Several fields of action for companies and organisations can be derived from the congress discussions:
- Develop AI governance: Companies should establish clear guidelines for the use of AI systems and factor in security aspects from the outset.
- Implement zero trust principles: Rolling out zero trust architectures is becoming increasingly important in order to be prepared against modern threats.
- Intensify staff training: Since the human factor plays a central role, security training should be carried out regularly and with a practical focus.
- Prepare for NIS-2 compliance: Affected companies should engage with the new regulatory requirements at an early stage.
For companies with particular security requirements, for example in the area of physical security, these digital security measures complement proven physical protection concepts such as safe systems or access control systems.
Outlook – What follows from this?
The BSI IT Security Congress has established itself as an important exchange format that brings the professional community together and provides impetus for the further development of the IT security landscape. The intensive engagement with AI security shows that the industry is proactively addressing the challenges of new technologies.
The emphasis on the human factor in IT security points to a paradigm shift: away from purely technical solutions and towards holistic approaches that put people at the centre. This will significantly shape the development of new security concepts and technologies.
BSI Vice President Thomas Caspers underlined the importance of promoting young talent and of cooperation with science and research. This shows that continuous innovation and knowledge transfer are decisive for the future viability of IT security.
Those interested still have until 15 May 2026 to register for the congress platform and follow all specialist presentations and discussions. This allows a broader audience to benefit from the insights and discussions and to transfer the resulting impetus into their own practice.
