Cybernation Germany: Automation, Awareness, and the Talent Gap

Earlier this week, I attended the ATHENE Distinguished Lecture Series in Darmstadt, where BSI President Claudia Plattner delivered her keynote Auf dem Weg zur Cybernation Deutschland. The talk crystallized something many of us in cybersecurity have been feeling: the gap between what we need to defend and what we can realistically staff is growing faster than ever.

The Vision of a Cybernation

Claudia Plattner’s keynote, chaired by Prof. Dr. Haya Schulmann, painted a clear picture of where Germany and Europe need to head. The term Cybernation is ambitious, but the underlying message is pragmatic: we need systemic change in how we approach cybersecurity, not just incremental improvements.

Three themes stood out to me from the discussions that day, and they are deeply interconnected.

Automation Is No Longer Optional

The volume of threats, vulnerabilities, and intelligence data has long exceeded what human analysts can process manually. Every day, new CVEs are published, threat actors shift tactics, and attack surfaces expand. Security teams are drowning in data while starving for actionable insights.

The SANS 2025 SOC Survey found that while 64% of teams have automated response mechanisms, less than a quarter have fully automated their processes. The Tines Voice of Security 2026 report paints a similar picture: despite 99% of SOCs using AI, 44% of security work remains manual, and 81% of respondents report rising workloads.

Automation in cybersecurity is not about replacing analysts. It is about freeing them from repetitive, time-consuming tasks so they can focus on what humans do best: strategic thinking, contextual judgment, and creative problem-solving. The question is no longer whether to automate, but what to automate first.

Cyber Situational Awareness Requires Scale

You cannot defend what you do not understand. Situational awareness, knowing what threats are active, which vulnerabilities are being exploited, and how your attack surface maps to real-world campaigns, is the foundation of effective security.

But building and maintaining that awareness manually is a losing game. The threat landscape moves too fast. By the time an analyst has finished reading yesterday’s advisories, today’s have already piled up. Real-time awareness demands automated collection, correlation, and synthesis of threat intelligence across dozens of sources.

Regulations Are Right, but They Widen the Talent Gap

Here is where it gets interesting. NIS2, DORA, and the Cyber Resilience Act are bringing tens of thousands of organizations into scope that previously had minimal cybersecurity obligations. NIS2 alone affects an estimated 100,000 to 350,000 organizations across the EU. DORA mandates four-hour incident reporting for critical financial entities. The CRA will require 24-hour disclosure of actively exploited vulnerabilities starting September 2026.

These regulations are a step in the right direction. They create the urgency and structure that the industry needs to raise the baseline of cyber resilience across Europe. But they also intensify an already acute problem: there simply are not enough skilled cybersecurity professionals to meet the new demand.

This is not an argument against regulation. It is an argument for rethinking how we deliver cybersecurity capabilities. If we cannot hire our way out of the talent gap, we need to build tools that multiply the effectiveness of the people we do have.

Building for This Reality

This is exactly the challenge we are tackling at Serify. We are building AI-powered cyber threat intelligence automation that helps security teams scale their intelligence operations without scaling their headcount at the same rate.

The reality for many teams, especially those newly in scope under NIS2 or DORA, is that they need to stand up CTI capabilities quickly with limited resources. That means automating the parts of the intelligence cycle that consume the most analyst time: gathering data from disparate sources, correlating indicators, contextualizing threats, and producing actionable reports.

We are approaching this with a European, privacy-first mindset. The organizations we serve need to trust that their security tooling respects their data sovereignty, something we consider non-negotiable.

What Stays With Me

Walking out of the ATHENE lecture this Monday, I felt a sense of alignment. The challenges Claudia Plattner outlined, the need for automation, better awareness, and practical solutions to the skills shortage, are precisely the problems that get us out of bed in the morning at Serify.

The path toward a Cybernation Germany, and a more resilient Europe, will not be paved by regulation alone. It requires tools and approaches that make it realistic for organizations to actually meet the bar that these regulations set. That is the work ahead, and it is work worth doing.