UBI 1 (AWV UBI) self-declaration on IT security
Companies in the special public interest: UBI 1 (AWV UBI)
Submitting a self-declaration on IT security
The UBI 1 (AWV UBI) category is subject to an obligation to submit a self-declaration on IT security (see Section 8f (1) of the BSI Act (BSIG)) in accordance with Section 2 (14) Sent. 1 No. 1 of the BSIG)
- from 1 May 2023 (see Section 8f (4) of the BSIG)
- and then at least every two years thereafter
Submitting a self-declaration on IT security (see Section 8f (1) of the BSIG)
Content of the self-declaration:
- IT security certifications covering the past 2 years
- Any other IT security audits and assessments from the past 2 years
- Information on measures in place to protect particularly sensitive IT systems, components and processes
Form for self-declaration on IT security for companies in the special public interest: UBI 1 (AWV UBI)
Please submit the self-declaration using the following form (in german language):
Encrypted communications
Wherever possible, self-declarations should be submitted to the mailbox ubi-buero@bsi.bund.de in encrypted format. This can be achieved via S/MIME or PGP.
Encrypted e-mail communications using S/MIME
Please use the relevant certificates in the zipped file for S/MIME-encrypted e-mail communications via ubi-buero@bsi.bund.de. This ZIP file contains these certificates:
1. Root certificate for PKI administration: PCA-1-Verwaltung-20
Validity: Sunday 1 December 2019, 01:00:00 to Tuesday 1 January 2030, 00:59:59
Fingerprint: EC6D 3196 531D 284F 1666 C3B7 51CE 6ADD 8E54 EEB2
2. IVBB Berlin-Bonn Information Network intermediate certification of Deutsche Telekom AG: CA IVBB Deutsche Telekom AG 20
Validity: Tuesday 1 December 2020, 01:00:00 to Wednesday 2 December 2026, 00:59:59
Fingerprint: 209A CE24 1511 3B80 071D 5FA3 A1F7 1760 4F0E 5ABB
3. Certificate for mailbox ubi-buero@bsi.bund.de
Validity: From 18.11.2024 to 15.11.2027
Fingerprint: 1622 8FD0 BCBA C525 064E CD12 0360 6911 D92B D82D
PGP-encrypted e-mail communications
For PGP-encrypted e-mail communications with the mailbox ubi-buero@bsi.bund.de, please use this PGP key
Validity: 18.11.2024 to 15.11.2027
Fingerprint: ECFB 857D 50C6 31C7 337E B3B4 E662 6772 7002 8DAD
UBI-Buero 2024-2027 PGP Public-Key
FAQ
Answers to frequently asked questions relating to self-declarations on IT security for UBI 1 (AWV UBI) can be found in the FAQ.
Data privacy
The BSI will process and store the data and information collected solely in order to fulfil its legally mandated tasks. Please note the Privacy Policy issued by the BSI.
