Digital Now

Collected excerpts, in particular on the area of ​​IT security , from the guidelines for the funding program “Digital now – investment support for SMEs” dated May 19, 2020 from the Federal Ministry for Economic Affairs and Energy. Read about it in its entirety here .

(...) In order for digital change to be successful in the company, the existing workforce must also be prepared for the changes and trained for them. When implementing technical solutions, classic personnel development measures (awareness raising, training) are often neglected. Errors, negligence or ignorance of IT security among employees are now considered the main cause of damage. Employee training and skills building in the company can be helpful, but target group-specific offers on the market are difficult for companies to identify and finance. Day-to-day business often ties up all available time and human resources. (...)

(...) Current studies show that most companies lack awareness of IT security. Although the need for trustworthy ICT infrastructure is increasing, a large number of SMEs do not have sufficient technical and organizational security measures. SMEs shy away from investing in IT security. A third of companies did not plan to make any investments in this area in 2017. The high costs are often cited as an obstacle to taking IT security measures.15 The investment grant program provides for an increased funding rate for investments in IT security within modules 1 and/or 2. (...)

1.2 Funding objectives (...)

– Contribution to increasing IT security in the supported companies. (...)

(...)

2.7.1 Module 1 “Investment in digital technologies” The subject of the funding is investments in specifically named digital technologies (usually third-party services) and associated processes and implementations. This includes in particular investments in hardware and software that promote the internal and external networking of companies, taking into account various aspects such as data-driven business models, artificial intelligence, cloud applications, big data, use of hardware (e.g. sensors, 3D printing) as well as IT security and data protection.

2.7.2 The type and number of qualification measures are described in the digitalization plan and must be related to the company's digitalization goals. The further training provider must be able to expect successful further training thanks to its spatial, technical and personnel equipment and there must be continuity in the offer over several years. Furthermore, the quality level of the training providers of the qualification measures must be verifiable through certification or through legal recognition or evidence of the quality assurance of the offer. (...)

Note: This is the new version of 2.7.2 as of August 19, 2021

5.2.3 Increased funding quotas apply for:

(...)

– Investments in training and technologies with a focus on IT security, including data protection (+ 5 percentage points). – This includes investments that specifically focus on improving IT security in your own company. These must make a significant contribution to ensuring IT protection goals such as confidentiality, integrity, availability or authenticity. (...)