Central reporting point for the IT security of the Federation

(1) The BSI is the central reporting point for cooperation between federal administration entities in matters of IT security.
(2) In performing this task, the BSI must
1. collect and evaluate all information necessary for averting dangers to IT security, in particular concerning vulnerabilities, malware, actual or attempted attacks on IT security and the methods observed in that connection,
2. inform federal administration entities without delay of information under no. 1 concerning them and of connections discovered, and
3. provide federal administration entities with recommendations on dealing with the dangers.
(3) Exempt from the duty to inform under subsection (2), no. 2 is information that may not be passed on under secrecy-protection provisions or agreements with third parties, or whose passing on would be inconsistent with the constitutional position of a member of the Bundestag or of a constitutional organ, or with the statutorily regulated independence of individual bodies.