TeleTrusT publishes updated guide ‘State of the Art in IT Security’ – 2025 edition

October 2, 2025

The German Federal Association for IT Security TeleTrusT has published a completely revised and expanded version of its guide ‘State of the Art in IT Security’. The 2025 edition is available for the first time in German, English and Dutch and now also has an ISBN for the unique identification of the publication.

Compliance with the requirements of the ‘state of the art’ is required by law at both national and European level, but in many details it leaves open which technical measures and evaluation criteria must be specifically fulfilled. This is where the expert groups organised by TeleTrusT come in, providing practical assistance for companies, suppliers and service providers.

The guide provides specific information and recommendations for determining the state of the art in IT security. It can serve as a reference for contractual agreements, procurement procedures or the classification of implemented security measures. It does not replace individual technical, organisational or legal advice, but offers guidance in a dynamic market environment in which legislators and standardisers only provide rough guidelines.

The 2025 edition has been completely revised and supplemented to take into account current developments, new standards and best practices in the field of IT security. It is available for download on the TeleTrusT website:

www.teletrust.de/publikationen/broschueren/stand-der-technik/

‘With the updated guide, we offer companies and experts a proven tool for implementing state-of-the-art technology in a practical manner and classifying compliance requirements in a methodically sound way,’ explains a TeleTrusT spokesperson.

Related Articles

Drone defence: Legal clarity becomes a key factor

Drone defence: Legal clarity becomes a key factor

The threat posed by drones to critical infrastructure (KRITIS) and businesses continues to grow. Airports, power stations, industrial and chemical parks, and the production and office sites of medium-sized companies are increasingly the focus of surveillance and...

Certificates of good conduct for external service providers

What security managers need to consider In data centres, building security or the operation of critical infrastructure, trust in the personnel employed is crucial. Companies are therefore increasingly considering whether they can require external service providers to...

Share This