The second act on increasing the security of IT systems (German IT Security Act 2.0) has given the BSI new duties relating to the IT security of companies in the special public interest (UBI).

According to Section 8f of the BSI Act (BSIG), certain IT security incidents must be reported to the Federal Office for Information Security (BSI). Registered companies also receive up-to-date information on optimising security on both the operative and strategic level.

Registration and nomination of a contact:

• In the case of UBI 1 (AWV UBI), this will be mandatory (Section 8f (5) of the BSIG) from 1 May 2023 and is voluntary at present
• In the case of UBI 2 (value creation UBI), this is mandatory no earlier than 2 years after the applicable UBI ordinance has come into force (Section 8f (5) of the BSIG) and is voluntary in the immediate aftermath of the UBI ordinance coming into force
• In the case of UBI 3 (hazardous incident UBI), this is voluntary at present (Section 8f (6) of the BSIG).

To register and to nominate a contact, please use this form (in german language).

Ideally, you should submit your completed form to the UBI Office in an encrypted e-mail.

• Appendix 1: Information sheet on secure information exchange based on the Traffic Light Protocol (TLP), version 2.0
• Appendix 2: Addresses of all operating areas in accordance with Section 2 (14) No. 3 of the BSIG

You can find all the information you need for e-mail communications, including communications in encrypted format, in our contact details.

FAQ

We answer frequently asked questions about registration in the registration sections of our FAQ.

If you have any questions that are not covered by the FAQ, please feel free to send an e-mail to the UBI Office at ubi-buero@bsi.bund.de.

Data privacy

The BSI will process and store the data and information collected solely in order to fulfil its legally mandated tasks. Please note the Privacy Policy issued by the BSI.