Orders of measures to avert or remedy security incidents

The BSI may, in the individual case, order federal administration entities to take measures necessary to avert or remedy a current security incident. The BSI may further require federal administration entities to report, within a reasonable period, on the measures ordered under the first sentence. The information security officer of the respective competent department is informed by the BSI of instructions and requests under the first and second sentences. The report must be transmitted to the BSI and, at the same time, to the information security officer of the respective competent department. Section 4(3) applies accordingly to the reporting.