Submitting a self-declaration on IT security

The UBI 1 (AWV UBI) category is subject to an obligation to submit a self-declaration on IT security (see Section 8f (1) of the BSI Act (BSIG)) in accordance with Section 2 (14) Sent. 1 No. 1 of the BSIG)

• from 1 May 2023 (see Section 8f (4) of the BSIG)
• and then at least every two years thereafter

Submitting a self-declaration on IT security (see Section 8f (1) of the BSIG)

Content of the self-declaration:

• IT security certifications covering the past 2 years
• Any other IT security audits and assessments from the past 2 years
• Information on measures in place to protect particularly sensitive IT systems, components and processes

Form for self-declaration on IT security for companies in the special public interest: UBI 1 (AWV UBI)

Please submit the self-declaration using the following form (in german language):

Selbsterklärung UBI 1

Encrypted communications

Wherever possible, self-declarations should be submitted to the mailbox ubi-buero@bsi.bund.de in encrypted format. This can be achieved via S/MIME or PGP.

Encrypted e-mail communications using S/MIME

Please use the relevant certificates in the zipped file for S/MIME-encrypted e-mail communications via ubi-buero@bsi.bund.de. This ZIP file contains these certificates:

1. Root certificate for PKI administration: PCA-1-Verwaltung-20

Validity: Sunday ‎1 ‎December ‎2019, 01:00:00 to ‎Tuesday ‎1 ‎January ‎2030, 00:59:59

Fingerprint: ‎‎EC6D 3196 531D 284F 1666 C3B7 51CE 6ADD 8E54 EEB2

2. IVBB Berlin-Bonn Information Network intermediate certification of Deutsche Telekom AG: CA IVBB Deutsche Telekom AG 20

Validity: ‎Tuesday ‎1 ‎December ‎2020, 01:00:00 to ‎‎Wednesday ‎2 ‎December ‎2026, 00:59:59

Fingerprint: 209A CE24 1511 3B80 071D 5FA3 A1F7 1760 4F0E 5ABB

3. Certificate for mailbox ubi-buero@bsi.bund.de

Validity: Tuesday 2 November 2021, 09:28:32 to Sunday 3 November 2024, 23:59:59

Fingerprint: EFAC 7035 D1FD 454B 4393 E7CE AE60 2B78 EDB3 D0DA

Encrypted e-mail communications using PGP

PGP-encrypted e-mail communications

For PGP-encrypted e-mail communications with the mailbox ubi-buero@bsi.bund.de, please use this PGP key

Validity: Wednesday 20 October 2021 to Sunday 20 October 2024

Fingerprint: 90D5 9B3B 35ED C8F5 8E02 63A5 E7FC 5729 8678 D34C:

UBI-Buero 2023 PGP Public-Key

FAQ

Answers to frequently asked questions relating to self-declarations on IT security for UBI 1 (AWV UBI) can be found in the FAQ.

Data privacy

The BSI will process and store the data and information collected solely in order to fulfil its legally mandated tasks. Please note the Privacy Policy issued by the BSI.