How quickly must I respond to a BSI inquiry?

The BSI typically sets a deadline of 4 to 6 weeks. Priority is to secure technical evidence first, then submit a written statement. A SaaSFort scan gives you the technical proof in under 60 seconds.

BSI deadline active

Received a BSI NIS2 audit letter? Get the technical proof in 60 seconds.

Q: What does the BSI require as evidence?

The BSI expects evidence of your external security posture (domain scan, TLS, DNS, security headers), a mapping to NIS2 Article 21 measures, and a written compliance statement. A SaaSFort scan report covers the technical points in 60 seconds.

Q: Does NIS2 apply to smaller companies?

Yes. Under German BSIG Paragraph 38, important entities with 50 or more employees or EUR 10 million annual revenue are in scope. The BSI registration deadline was 6 March 2026.

Q: How much does the SaaSFort NIS2 report cost?

The basic scan is free, no sign-up required. The full audit pack with NIS2 Article 21 mapping and BSI-ready PDF is a one-time EUR 39, no subscription.

The BSI expects concrete evidence of your security posture under NIS2 Article 21. SaaSFort scans your domain, delivers the technical assessment as a PDF, and maps which Article 21 measures you already meet. Attach the document directly to your BSI response.

Free domain scan (no account, no credit card)

Start scan

60 checks, NIS2 Article 21 mapping, result in under 60 seconds.

Already know your grade? Full audit pack for a one-time EUR 39 PDF delivered immediately after checkout.

What the BSI expects from you

The specific documents requested in a NIS2 inquiry:

Technical security assessment (external)

SaaSFort covers this

Proof of your external security posture: TLS configuration, DNSSEC, DMARC/SPF/DKIM, security headers, exposed admin access, certificate chain. SaaSFort delivers this assessment as a PDF in 60 seconds.

Mapping to NIS2 Article 21 measures

SaaSFort covers this

The BSI expects you to show which of the 10 Article 21 measures (network security, incident management, cryptography, etc.) you have implemented. The audit pack includes this mapping pre-filled.

Written compliance statement

Template below

A 1-2 page statement explaining which measures are already active, which are pending, and by when. Use our free response template as a starting point.

BSI registration confirmation

External

If not yet registered: do it immediately at meldepflicht.bsi.bund.de. Late registration is accepted. Explain the delay in your cover letter.

Information security officer contact details

Internal

Name, role, email, phone. If no ISO is in place: name the managing director as the responsible person (Paragraph 38 BSIG).

Handle points 1 and 2 in 60 seconds

Free scan. Technical assessment and NIS2 Article 21 mapping as a PDF.

Scan for free Buy audit pack (EUR 39)

One-time payment, no subscription, no account. 7-day refund, no questions asked.

Free BSI response template

Written compliance statement for NIS2 Article 21 and BSIG Paragraph 38. Fill in and send to the BSI.

Common questions about BSI NIS2 inquiries

What does the BSI require as evidence?

The BSI expects a technical security assessment (external domain check), a mapping to NIS2 Article 21 measures, and a written compliance statement. SaaSFort delivers the first two as a PDF in 60 seconds.

How quickly must I respond?

Typically 4 to 6 weeks from receiving the letter. Secure technical evidence first, then submit your written statement. The sooner you act, the more credible your compliance intent looks to the BSI.

Am I really in the NIS2 scope?

If the BSI wrote to you, they believe so: yes. Important entities with 50 or more employees or EUR 10 million annual revenue in 18 sectors are in scope. You can contest it, but this rarely succeeds.

How much does the SaaSFort scan cost?

The basic scan is free, no sign-up, no credit card. The full audit pack with NIS2 Article 21 mapping and BSI-ready PDF is a one-time EUR 39. No subscription, no account. 7-day refund, no questions.

Prepare your BSI response

Technical assessment in 60 seconds. Full audit pack for EUR 39.

Scan for free Buy audit pack (EUR 39)