Core activities in the Directorate-General BL focus on providing consulting services at federal, state and municipal levels while handling many cross-sectional tasks.

Sections in the Directorate-General BL (BL)

Section BL 1 -- Information security consulting and protection of classified information

• Information security consulting—especially for public administration clients—and for the protection of classified information
• Development of specifications and recommendations, as well as completion of audits in the field of physical security, classified IT and eavesdropping protection
• Establishment and promotion of IT security as a key task area for the BSI pursuant to the BSIG
• Consulting with the aim of achieving a level of IT security that fulfils applicable standards, is technically state of the art, accounts for the individual circumstances of the customer and is appropriate in light of the existing threat landscape
• Client support, including the installation and administration of an information security management system (ISMS), and for the selection and deployment of security products appropriate for the respective intended purpose
• Knowledge transfer to customer groups, explanation of circumstances relevant for IT security, including the presentation and assessment of alternative courses of action
• Completion of risk assessments while accounting for the particular needs of the respective customer

Section BL 2 -- Customer management and legal

• Nationwide liaison activities, with liaison offices in Bonn, Berlin, Dresden, Hamburg, Stuttgart and Wiesbaden
• Development of strategies and new approaches for information security
• Investigation of interactions between information security and legal matters
• Planning and design of BSI partnerships at European and international level

Section BL 3 -- Information security for the consolidated federal data centres and networks

• Coordination of BSI activities for information security management in IT consolidation
• Implementation and steering of government network security, and improvements to the same
• Development of minimum standards to secure information technology at federal level