Bundesamt für Sicherheit in der Informationstechnik

The Bundesamt für Sicherheit in der Informationstechnik, called BSI, is the German Federal Office for Information Security. It works on cyber security in Germany, with press releases from Bonn.

The office serves four main groups. Its topic areas cover the state and public administration, companies and organisations, consumers, and the regulated economy. Each area has guidance and advice. For public bodies, the office offers security consulting, minimum standards for federal bodies and cooperation with the federal government and the states.

The National IT Situation Centre and CERT-Bund handle response to cyber incidents. CERT-Bund publishes daily warnings about weaknesses in widely used software, rated by how serious they are. The office also publishes security notices, such as recent warnings about critical weaknesses in PHP and other products. People and firms can find pages for reporting an IT security incident, including a policy for coordinated disclosure of weaknesses.

For companies, the office covers the Cyber Resilience Act, IT-Grundschutz, threat intelligence, an IT security label, and certification and recognition. In October 2026 it published its Grundschutz++ method as BSI Standard 300-1, a further step beyond IT-Grundschutz. It also published an example curriculum for management training under the NIS2 rules. Companies covered by NIS2 must register in the BSI portal. Critical infrastructure operators, known as KRITIS, have their own guidance and an FAQ.

The office has a new AI Safety and Security Institute Germany. It is set up as a national body to assess powerful AI systems.

Consumers get advice on safe online shopping, protecting online accounts, cyber crime methods, social media and messaging, and smart meters and charging points. The office also lists career options, events and publications.

Services

• IT security incident support
• CERT-Bund warnings
• Security consulting for public bodies
• Minimum standards for federal bodies
• IT-Grundschutz
• Certification and recognition
• IT security label
• Threat intelligence
• Consumer cyber security advice