Modern societies are increasingly dependent on information technology (IT). This is particularly true for critical infrastructures such as energy, transportation, or finance, which perform essential functions in a state. Disruptions or failures in IT can potentially have far-reaching consequences for the security of a state. The work examines measures to protect critical information infrastructures in Germany and the USA, compares and evaluates them, and presents specific options for action to improve the status quo in Germany. Using the theory of public goods, the author demonstrates the state's responsibility for private critical information infrastructures.