It is planned to offer a comprehensive range of IT security related advice and information. In particular it is necessary to provide different kinds of information for different kinds of knowledge. There will be three big information groups called Alerts/Warnings, Advisories and Awareness materials.

The category Alerts and Warnings stands for technical warnings and threat levels. Technical warnings are typically warnings about an ongoing threat, event or vulnerabillity with high risk for concerned persons. Threat levels are aggregating the ongoing threat level of the internet into a single value which are often traffic lights or multi-colored systems displaying a state.

The second category advisory includes similar data but much more detailed and not immediately available. There will be also information with lower risk and awareness material for actual events. For example, this could be a phishing wave which targets customers of a specific bank. Then they should be aware of that.

The last category handles IT security awareness materials. This information class is typically longer-lived and needs more effort when creating it. Awareness material could be best practices, educational material, checklists, wizards, other tests or guides and howto's. For example, that could be informations about securing your personal computer, using the internet or general threats.

The information could be displayed as videos, pictures, comics or games.

To understand the needs of the target group, first the strengths and weaknesses of the groups must be identified, because the communication channels must fit to the strenghts and weaknesses of the target groups.

For example, citizens are using the internet for personal purposes, ranging from young to old. The SME group consists of employees and employers from small and medium-sized enterprises which also have strengths and weaknesses. One big difference is that the competences in IT security are ranging from non-existent to high based on the size of the companies. Tiny enterprises usually haven't any expert in IT security. As bigger the company size rises as higher is the probabillity that they have an IT security expert. The biggest and most important group within companies are the employees. The reason is that the most of the security violations are caused by human errors. The strenghts and weaknesses are related to them of the citizens but the impact is much higher.