BSI Approval

Security-compliant systems for critical infrastructures

BSI approval is a prerequisite for deploying IT systems in highly protected areas such as government authorities or critical infrastructures. It covers requirements for system hardening, information security, encryption, and protection against tampering. iesy contributes technical expertise and many years of experience in implementing security-critical projects.

The standards at a glance

Emission Security / TEMPEST – Requirements for electromagnetic emission security (EMSEC) in classified environments.
Systems for Attack Detection (SzA / OH SzA) – BSI requirements for detecting and responding to cyberattacks.
BSI IT Baseline Protection Compendium – Catalogue of measures for the systematic protection of IT systems and organizations.
Cooperation with certification partners – integration into existing approval processes

iesy Expertise

iesy develops customized system solutions according to the Security-by-Design principle, considering relevant security standards already in the concept phase.
We define security requirements at an early stage, creating a stable foundation for the entire development process.
In security-critical projects, we rely on an established network of specialized partners who support our customers throughout development and, if required, carry out final system certification.

Additional context – concise and to the point.

INFO

BOX

What Does BSI Approval Mean?

BSI approval is granted by the German Federal Office for Information Security (BSI). It confirms that IT systems meet the highest security requirements and is mandatory for use in government agencies and critical infrastructures. The basis includes specifications for cryptography, system hardening, boot security, and tamper protection.

Source: Federal Office for Information Security (BSI), “Zulassung”, accessed 28.09.2025

Why BSI Approval is Not Uniform

The requirements are not standardized and vary depending on the system type and field of application. Communication components, hardware platforms, and cryptographic modules are subject to different test criteria. IT systems in public authorities follow the BSI IT Baseline Protection Compendium, which includes both technical and organizational measures. Even without their own BSI approval, companies can play a key role by providing compliant hardware and security features such as hardening, secure boot, or tamper-proof architectures, forming the basis for successful certification.

Source: Federal Office for Information Security (BSI), “BSI-Grundschutz-Kompendium”, accessed 28.09.2025

iesy as a Partner in the Approval Process

iesy not only delivers the technical foundation but also works closely with BSI-certified partners and test laboratories. In this way, we ensure that all relevant security measures are implemented and approvals are completed efficiently and without delay.

Source: Federal Office for Information Security (BSI), “Certification and Recognition”, accessed 28.09.2025

BSI Approval

Security-compliant systems for critical infrastructures

The standards at a glance

iesy Expertise

Additional context – concise and to the point.

What Does BSI Approval Mean?

Why BSI Approval is Not Uniform

iesy as a Partner in the Approval Process

iesy & friends Newsletter

Thank you for signing up!