Act on the Federal Office for Information Security (BSI Act)

The Federal Office for Information Security (Germany) (BSI) Act governs the tasks and powers of the BSI as well as the obligations of operators of critical facilities and other regulated entities. With the transposition of Network and Information Security Directive 2 (NIS2) it was fundamentally rewritten and now also governs risk management and reporting obligations for essential and important entities. It is thus the central German legal basis for companies' cybersecurity obligations.