Telekom Logo
2022 Corporate Responsibility Report

Our cybersecurity infrastructure

Cyber Emergency Response Team
We are always working to develop new ways to defend against attacks. We launched a Cyber Emergency Response Team (CERT) in the mid-1990s, which is responsible internationally for managing security incidents for our information and network technologies. Since then, we have continued to expand our activities in relation to cyberdefense, and promote more information and information sharing. Since 2020, our CERT has been officially certified according to the SIM3 standard (Security Incident Management Maturity Model). It is now one of only three German CSIRT (Computer Security Incident Response Team) / CERT organizations that comply with this standard.

Cyber Defense Centers
At our Cyber Defense and Security Operations Centers (SOCs), we monitor the security situation 24/7, 365 days of the year, for ourselves and our customers. With the aid of artificial intelligence (AI), the SOCs analyze about a billion security-relevant data items, from some000 data sources, every day. Our security specialists detect attacks in real time, and immediately initiate the steps necessary to neutralize them or even ward them off completely. In 2022, we registered peaks of up to 111.2 million attacks per day against Deutsche Telekom's “honeypot“ systems – systems intentionally designed to lure attackers. In addition, we actively combat botnets (interconnected computers infected with malware) in the Deutsche Telekom AG network. We are the only internet provider in Europe that safeguards its network in this way. This is how we protect our infrastructure, and hence also our customers’ data.

Threat Intelligence Team 
When we register an attack, our Threat Intelligence team studies it to determine precisely how it has been perpetrated. To such ends, our Threat Intelligence team consults with, and shares findings with, researchers throughout the world. In this way, our team always stays abreast of the latest scientific findings – and well informed about the threats and perpetrators it faces. Even if we cannot always stay a step ahead of cybercriminals, we always try to ensure they are well aware of our presence.

In the same way, we also provide other companies with our measures to fight cyberattacks: More than 30 German DAX companies and SMEs employ our services for their own protection.