Stefan Erdweg

Managing Director of 3-core GmbH | Lecturer at HfÖV Bremen | Speaker and Media Expert

Stefan Erdweg founded 3-core GmbH in 2019 and has served as its Managing Director ever since. With more than 20 years’ experience in strategic security and crisis management, he advises businesses and critical infrastructure operators on hybrid threats, physical security, business continuity and crisis management.

His professional perspective is both international and interdisciplinary. Stefan Erdweg studied Risk and Security Management at the Hochschule für Öffentliche Verwaltung Bremen (HfÖV Bremen), completed a Master of Arts in International Politics with a focus on Critical Geopolitics at Newcastle University, and subsequently earned an MBA in General Management from IU International University of Applied Sciences.

WDR and WELT TV consult Stefan Erdweg as an expert on critical infrastructure protection and countering hybrid threats. In interviews and presentations, he analyses attacks, acts of sabotage, drone incidents and hybrid threats, translating them into tangible implications and practical options for operators, executive teams and security leaders.

Latest Media and Television Appearances

Stefan Erdweg on WDR: How Secure Is Our Critical Infrastructure?

Following the attack on an electricity substation, Stefan Erdweg discusses the security implications in the WDR aktuell studio. As an expert in critical infrastructure protection, he examines the particular challenges involved in safeguarding the energy supply.
02.09.2026

Stefan Erdweg in a WELT Interview: Attacks on Critical Infrastructure

Stefan Erdweg assesses the attacks and the vulnerability of energy infrastructure. He explains why even relatively simple methods can have serious consequences and why physical security requires greater attention.
02.09.2026

Attack on an Electricity Substation: Critical Infrastructure Is Particularly Vulnerable

A WELT TV analysis of the attack on an electricity substation in Brandenburg, focusing on the vulnerability of the power supply, the need for stronger protection and the ways in which data-protection requirements can create obstacles.
01.09.2026

Suspected Attack: Weapons Cache Found Near Berlin - ‘It Is Consistent with Hybrid Warfare’

An assessment of the weapons cache found near Berlin and how specific incidents should be understood within the wider landscape of hybrid threats and critical infrastructure protection.
21.08.2026

Counter-Drone Defence: ‘Imagine It Comes Down in the Airport Approach Area and Then Explodes’

An assessment of counter-drone defence at German airports, focusing on the limitations of detection alone, the need for effective assessment and decision-making processes, and the potential consequences of countermeasures for the surrounding area.
07.08.2026

Attack on the TGV Network: ‘Monitoring So Many Kilometres of Track Is Almost Impossible’

An analysis of the coordinated acts of sabotage against France’s high-speed rail network, the level of planning behind such attacks and the limitations of comprehensive surveillance across extensive infrastructure networks.
26.07.2024

Terrorist Attack Near Moscow: A Residual Risk Remains

A WELT assessment of the security situation following the terrorist attack near Moscow, focusing on the limitations of preventive protective measures, the residual risk that remains and the importance of sustained vigilance at publicly accessible targets.
25.03.2024

Selected Talks, Panels and Conferences

Critical Infrastructure in Focus: Implications of the Conflicts in Iran and Ukraine, and Shifts in Global Power, for Critical Infrastructure Operators

A presentation for the DVGW on the changing security environment for energy and water infrastructure, security of supply, crisis preparedness, hybrid threats and resilience.
ANNOUNCED

Panel: From Security Strategy to Effective Critical Infrastructure Practice

A discussion on the practical implementation of critical infrastructure protection, the effectiveness of current standards and the challenges facing operators, with participants including Christina Polzin of the German Federal Ministry of the Interior and Madlen Fritsche of Mainova AG.
30.06.2026

Detected. Delayed. Defended. - Plan Resilience Time, Don’t Leave It to Chance

A specialist presentation in the Physical Security track on the operational sequence of detection, delay and response, and its importance for the resilience of critical assets.
25.11.2025

Geopolitical Risks and Security Strategies at Germany’s First LNG Terminal

A practice-led presentation at PROTEKT connecting geopolitical risk, physical security and strategic security planning, using Germany’s first LNG terminal as a case study.
07.11.2024

Protecting an LNG Terminal: The Operator’s Perspective

A presentation at the Protecting Maritime Infrastructure side event, followed by participation in the National Perspective panel alongside representatives including the German Federal Ministry of the Interior, the Federal Police, the Waterways Police and the OFFSHORE-WINDENERGIE Foundation.
17.04.2024

Maritime Critical Infrastructure Protection: The Example of an LNG Terminal

An international specialist presentation on protecting maritime critical infrastructure from the private-sector perspective, using an LNG terminal as an example, followed by a panel discussion.
04.-05.06.2024

Security Requirements at the Wilhelmshaven LNG Terminal: A Strategic Perspective

The closing presentation at the Maritime Critical Infrastructure forum, offering practical insight into the project phase for establishing an LNG terminal and the associated security requirements.
07.11.2024

Teaching and Knowledge Transfer

Alongside his role as Managing Director, Stefan Erdweg lectures at the Hochschule für Öffentliche Verwaltung Bremen (HfÖV Bremen), where he teaches the principles and techniques of security management. The combination of teaching, consultancy practice and public debate on security shapes both his presentations and his media contributions.

Articles and Interviews by Stefan Erdweg

German Critical Infrastructure Umbrella Act and NIS2: Recommendations for Businesses

A specialist article on the heightened threat environment, new regulatory requirements and the need to integrate business continuity management, crisis management and physical security at an early stage.
09.01.2025

A New Reality for Businesses: The German Critical Infrastructure Umbrella Act and NIS2

The print edition of the specialist article published in GIT SICHERHEIT 4/2025.
2025

DMB Interview: Stefan Erdweg

An interview on corporate resilience, security, emergency and crisis management, and the role of preparedness and scenario-based thinking for businesses.
12.12.2019

Profile of Stefan Erdweg

Stefan Erdweg has more than 20 years’ experience in strategic security and crisis management. Before founding 3-core GmbH, he worked as a Senior Security Consultant from 2013 to 2018 on a long-term assignment for E.ON SE. He previously gained experience in Group Security at RWE AG and METRO AG.

His professional experience includes security audits, OSINT-supported risk assessments, corporate security, the protection of employees, travellers and projects, and the development of robust security, crisis-management and business-continuity structures. This combination of corporate security, operator experience and consultancy continues to shape his perspective on critical infrastructure.

His selected qualifications include Certified Information Security Manager® (CISM®), Business Continuity Manager – Emergency Management certified by TÜV NORD CERT, and Port Facility Security Officer (PFSO). Stefan Erdweg has also lectured at the Hochschule für Öffentliche Verwaltung Bremen since 2020.

Areas of Expertise

Hybrid Threats and Protective Security

Analysis of sabotage, espionage, drones, interference and combined physical and digital attack scenarios, together with their implications for operators and organisations.

Corporate Resilience and Business Continuity

Business impact analysis, BCM in accordance with BSI Standard 200-4 and ISO 22301, emergency operations, recovery, and robust mapping of dependencies between processes and resources.

Critical Infrastructure Protection

Risk-based physical security, security concepts, perimeter security, detection, access control, response and organisational security standards for critical infrastructure environments.

Geopolitics and the Security Environment

Translation of geopolitical developments and shifts in global power into tangible risks for energy, water, transport, logistics, industry and other critical sectors.

Drones and Emerging Attack Vectors

An integrated approach to detection, identification, assessment, decision-making and response, including organisational responsibilities and emergency procedures.

Crisis and Emergency Management

Crisis-management structures, decision-making capability, alerting, situational management, crisis communications, exercises and simulations under realistic conditions.

Topics for Media Enquiries

Stefan Erdweg is available to newsrooms and editorial teams for interviews, live broadcasts, background briefings and expert analysis of current security situations and threat environments.

  • Hybrid threats to critical infrastructure
  • Sabotage, espionage and physical attacks on energy, transport and utility infrastructure
  • Drones as a security risk: detection, assessment, responsibilities and response
  • The German Critical Infrastructure Umbrella Act, NIS2 and the practical implementation of resilience requirements
  • Physical security, perimeter security, access control, video surveillance, detection and response
  • Business continuity management and the recovery of critical processes
  • Crisis management, crisis-management teams, exercises and decision-making under time pressure
  • Geopolitical risks and their operational implications for operators and businesses