Evidence behind the claims

This index collects external publications, standards, authority pages, and technical resources that support statements on the website. Glossary sources remain linked directly on each glossary entry.

  3. Open sourceBSI catalogue published on 10 September 2024 specifying criteria under Section 8a(1) and (1a) BSIG, including asset inventory, classification, network topology, and change management.

    BSI catalogue published on 10 September 2024 specifying criteria under Section 8a(1) and (1a) BSIG, including asset inventory, classification, network topology, and change management.

  4. Open sourceBSI guidance for manufacturers on the CRA timeline, risk assessment, conformity evidence, vulnerability handling, support periods, and SBOMs.

    BSI guidance for manufacturers on the CRA timeline, risk assessment, conformity evidence, vulnerability handling, support periods, and SBOMs.

  5. Open sourceBSI directory for the email security initiative “Deine E-Mails, dein digitales Zuhause.”.

    BSI directory for the email security initiative “Deine E-Mails, dein digitales Zuhause.”.

  6. Open sourceBSI implementation guidance covering documentation, roles, remote maintenance, segmentation, and protection of building-automation networks such as BACnet, KNX, and M-Bus.

    BSI implementation guidance covering documentation, roles, remote maintenance, segmentation, and protection of building-automation networks such as BACnet, KNX, and M-Bus.

  7. Open sourceBSI IT-Grundschutz module for integrating information security into the planning, implementation, and operation of building automation.

    BSI IT-Grundschutz module for integrating information security into the planning, implementation, and operation of building automation.

  8. Open sourceBSI security information from 2023 on documentation gaps, ownership, patch management, IT crossings, and undocumented remote maintenance in building automation and management.

    BSI security information from 2023 on documentation gaps, ownership, patch management, IT crossings, and undocumented remote maintenance in building automation and management.

  9. Open sourceBSI guidance on systems for attack detection (SzA) for critical infrastructure operators.

    BSI guidance on systems for attack detection (SzA) for critical infrastructure operators.

  10. Open sourceOfficial BSI collection of cyber resilience requirements for manufacturers and products, with separate parts for general requirements, SBOMs, and vulnerability reports.

    Official BSI collection of cyber resilience requirements for manufacturers and products, with separate parts for general requirements, SBOMs, and vulnerability reports.

  12. Open sourceCISA and international partner guidance on creating and maintaining a definitive view of operational technology architecture.

    CISA and international partner guidance on creating and maintaining a definitive view of operational technology architecture.

  13. Open sourceJoint agency guidance published in August 2025 on building an OT asset inventory with taxonomy, data management, and lifecycle maintenance.

    Joint agency guidance published in August 2025 on building an OT asset inventory with taxonomy, data management, and lifecycle maintenance.

  14. Open sourceJoint advisory from international cybersecurity authorities on protecting MSPs and their customers.

    Joint advisory from international cybersecurity authorities on protecting MSPs and their customers.

  15. Open sourceDKE overview of the IEC 62443 standard series for cybersecurity in industrial automation and control systems.

    DKE overview of the IEC 62443 standard series for cybersecurity in industrial automation and control systems.

  17. Open sourceGerman ordinance defining critical infrastructure under the BSI Act in its current version.

    German ordinance defining critical infrastructure under the BSI Act in its current version.

  18. Open sourceGerman Federal Government article on the KRITIS umbrella act and cross-sector resilience requirements.

    German Federal Government article on the KRITIS umbrella act and cross-sector resilience requirements.