Testing and confirmation bodies for certification services - Recognition

Service Description

Confirmation bodies or testing and confirmation bodies have the task of checking and confirming security concepts of certification service providers (testing and confirmation body) and confirming that the legal requirements for products for qualified electronic signatures are met (confirmation body).

The recognized bodies must perform their tasks impartially, free of instructions and conscientiously. Tests and confirmations that have been carried out must be documented.

Upon application, both natural persons and legal entities can be recognized as confirmation bodies and/or testing and confirmation bodies.


  • Reliability
    A person is deemed to be reliable if he or she is suitable for the proper performance of the tasks incumbent upon him or her on the basis of his or her personal qualities, conduct and abilities.
  • Independence
    A person is considered independent if he or she is not subject to any economic, financial or other pressure that could influence his or her judgment or jeopardize the impartial performance of his or her duties.
  • Expertise
    The necessary expertise is possessed by those who, on the basis of their training, professional education and practical experience, are suitable for the proper performance of the tasks incumbent upon them.
  • Accreditation of the applicant body in accordance with DIN EN 45011 as a certification body for IT security in accordance with ITSEC or CC, or accreditation as a testing body in accordance with DIN EN ISO/IEC 17025 as a testing laboratory for IT security with licensing for testing in accordance with ITSEC or CC by the Federal Office for Information Security (BSI).
  • for recognition as a testing and confirmation body for security concepts: Submission of a documented testing and confirmation procedure for security concepts.

Tip: An overview of the other requirements and minimum criteria for confirmation bodies and testing and confirmation bodies can be found on the Federal Network Agency's website in the "Publications" topic area under the item "Recognition of testing and confirmation bodies".

Source: Zuständigkeitsfinder Thüringen (Linie6PLus)

Start your request directly online:

Competent Authority

Bundesnetzagentur für Elektrizität, Gas, Telekommunikation, Post und Eisenbahnen

Tulpenfeld 4
53113 Bonn, Stadt