UBI 1 (AWV UBI) self-declaration on IT security
Companies in the special public interest: UBI 1 (AWV UBI)
Submitting a self-declaration on IT security
The UBI 1 (AWV UBI) category is subject to an obligation to submit a self-declaration on IT security (see Section 8f (1) of the BSI Act (BSIG)) in accordance with Section 2 (14) Sent. 1 No. 1 of the BSIG)
- from 1 May 2023 (see Section 8f (4) of the BSIG)
- and then at least every two years thereafter
Submitting a self-declaration on IT security (see Section 8f (1) of the BSIG)
Content of the self-declaration:
- IT security certifications covering the past 2 years
- Any other IT security audits and assessments from the past 2 years
- Information on measures in place to protect particularly sensitive IT systems, components and processes
Form for self-declaration on IT security for companies in the special public interest: UBI 1 (AWV UBI)
Please submit the self-declaration using the following form (in german language):
Encrypted communications
Wherever possible, self-declarations should be submitted to the mailbox ubi-buero@bsi.bund.de in encrypted format. This can be achieved via S/MIME or PGP.
Encrypted e-mail communications using S/MIME
Please use the relevant certificates in the zipped file for S/MIME-encrypted e-mail communications via ubi-buero@bsi.bund.de. This ZIP file contains these certificates:
1. Root certificate for PKI administration: PCA-1-Verwaltung-20
Validity: Sunday 1 December 2019, 01:00:00 to Tuesday 1 January 2030, 00:59:59
Fingerprint: EC6D 3196 531D 284F 1666 C3B7 51CE 6ADD 8E54 EEB2
2. IVBB Berlin-Bonn Information Network intermediate certification of Deutsche Telekom AG: CA IVBB Deutsche Telekom AG 20
Validity: Tuesday 1 December 2020, 01:00:00 to Wednesday 2 December 2026, 00:59:59
Fingerprint: 209A CE24 1511 3B80 071D 5FA3 A1F7 1760 4F0E 5ABB
3. Certificate for mailbox ubi-buero@bsi.bund.de
Validity: Tuesday 2 November 2021, 09:28:32 to Sunday 3 November 2024, 23:59:59
Fingerprint: EFAC 7035 D1FD 454B 4393 E7CE AE60 2B78 EDB3 D0DA
Encrypted e-mail communications using PGP
PGP-encrypted e-mail communications
For PGP-encrypted e-mail communications with the mailbox ubi-buero@bsi.bund.de, please use this PGP key
Validity: Wednesday 20 October 2021 to Sunday 20 October 2024
Fingerprint: 90D5 9B3B 35ED C8F5 8E02 63A5 E7FC 5729 8678 D34C:
FAQ
Answers to frequently asked questions relating to self-declarations on IT security for UBI 1 (AWV UBI) can be found in the FAQ.
Data privacy
The BSI will process and store the data and information collected solely in order to fulfil its legally mandated tasks. Please note the Privacy Policy issued by the BSI.
- Short URL:
- https://www.bsi.bund.de/dok/UBI-Meldungen