Navigation and service

BSI minimum standard for the use of interdepartmental Federal communications networks ('User obligations Federal Networks')

The interdepartmental communications network infrastructure forms the reliable foundation for communications in the Federal Administration. The Federal Networks form an essential component for the work of the federal ministries and their business units, since the IT processes and services provided by the Federal Networks are indispensable for completing the various business processes. The need for secure and available facilities for communication and data transfer necessitates a requirement to define a uniform set of security requirements both within the Federal Networks and on the user side. This applies in particular in light of the daily attacks on administration and government networks. As a guideline for information security within the Federal Administration, the Implementation Plan (UP) Bund 2017 therefore specifies the following:

"To guarantee information security in interdepartmental communications network infrastructure, in the IT systems deployed and in the IT devices connected by users to this network infrastructure, the information security requirements formulated by the BSI for users ('user obligations') must be maintained by the users in the version that has been defined as the minimum standard."

Finalised as version 2.0 in September 2019, the BSI minimum standard on the use of the Federal Government interdepartmental communications networks ('User obligations for Federal Networks fulfils the binding requirement from UP Bund 2017 and specifies the minimum security requirements and measures that must be implemented to participate in the Federal Networks as a user. The minimum standard therefore consolidates and replaces the user obligations for the Federal Networks in force since 2009 (V1.2) and requirements from approx. 35 user information letters. Supplementing the minimum standard, a separate help document is used to explain terms, useful information, examples of how to implement the security requirements as well as specifications for core services.

Download minimum standard (only available in German)

According to the General Administrative Provision for the Material Protection of Classified Information (VSA), the minimum standard and the help document are 'Classified information (CI) – RESTRICTED' and therefore not published here. Both documents and the reference tables can be downloaded from the protected area. Please feel free to contact us if you have any queries.