A research and development theme integrating support for establishing a CSIRT based on assumed ransomware scenarios, business continuity assessments, system risk analysis, and measures against shadow AI, together with the development of AI usage guidelines and defined areas of responsibility. Its distinguishing feature is the combination of technical and operational support for cyberattack response and AI governance.