Navigation and service

A Basiskurses is available to qualify as a digital first-aider. It is offered by the BSI as a free online course.

Upon completing it, participants can generate a training certificate themselves. Registration with the cyber security network takes place via the registration and information portal (MIP).

Digital first-aiders are tasked with providing qualified assessments of IT security incidents, offering initial support to parties affected by IT disruptions and IT incidents and recommending the first actions they should take. An affected party can contact a digital first-aider by telephone or e-mail during their service hours in the Cyber Security Network, which they may offer on a voluntary basis. The digital first-aider can then provide the appropriate support.

Guidance on the support provided by digital first-aiders is available in the Guide to Responding to IT Security Incidents for Digital First-Aiders.

There is currently no separate test for digital first-aiders to complete. Each study module of the basic course ends with a sample exercise to consolidate what you have just learned. A self-test is also available after each module of the basic course.

Following successful self-study, you can generate your own training certificate.

Digital first-aiders must complete continuous further training so that their knowledge remains up to date. They receive regular information from the Cyber Security Network for this purpose. In addition, the Cyber Security Network offers the opportunity to share experiences in regular forums.

No. Within the Cyber Security Network, the BSI provides the contact details of those who have successfully (and verifiably) completed the relevant training modules and wish to be named on the BSI website. A party affected by an IT security incident can contact a digital first-aider directly. The BSI does not act as an agency, nor does it commission digital first-aiders. Instead, an affected party in need of support independently commissions the digital first-aider of their choice and negotiates the conditions (if necessary). The conditions in question – for example, whether the affected party must compensate the digital first-aider for their support – is a matter for the affected party and the digital first-aider to discuss as part of their individual contractual agreement. After that, the digital first-aider is responsible for the support they provide to the affected party. The BSI has no knowledge of the agreement between the parties and plays no part in the support rendered.

Liability is also matter between the affected party and the digital first-aider. They must decide whether to draw up a relevant provision or be subject to statutory liability provisions. Since the BSI itself is not involved in the provision of service, has no knowledge of the particular process followed by the digital first-aider, imposes no requirements in this regard and does not act as an agency in the contractual relationship between the parties, the BSI is not liable for any damage that may be incurred in the course of the provision of support by the digital first-aider. This is the case regardless of whether the digital first-aider is acting in a voluntary capacity. It is also up to the digital first-aider to take out appropriate insurance at their own discretion to cover cases of liability.