BSI Declares 2025 as the Year for Email Security

The Federal Office for Information Security (BSI) has announced that 2025 will be dedicated to enhancing email security across Germany. In collaboration with the eco Association and Bitkom, the initiative aims to bolster the security of email communications nationwide.

Organizations of all sizes are encouraged to participate in this significant endeavor. They can register for involvement until August 15, 2025, and may apply for a place in the BSI Hall of Fame, which recognizes contributions to email security.

The BSI is urging businesses and organizations that operate their own email infrastructure or offer such services to implement two Technical Guidelines: one concerning Secure Email Transport (BSI TR-03108) and another on Email Authentication (BSI TR-03182). These guidelines encompass six essential measures:

• Sender Policy Framework (SPF)
• DomainKeys Identified Mail (DKIM)
• Domain-based Message Authentication, Reporting & Conformance (DMARC)
• Domain Name System Security Extensions (DNSSEC)
• DNS-based Authentication of Named Entities (DANE)
• Transport Layer Security (TLS)

As an alternative to DNSSEC, organizations may consider implementing MTA Strict Transport Security (MTA-STS).

While the BSI does not expect all organizations to meet these criteria immediately, a commitment to implement them in the near future is sufficient for inclusion in the Hall of Fame.

To assist organizations in this transition, the BSI, along with the Cyber Security Alliance, will offer an array of resources, including webinars, how-to guides, email tips, live events, podcasts, cooperative programs, starter kits, competency group meetings, email checkers, consultations, metrics, networking opportunities, and exchanges of best practices among participants. This collaborative approach is designed to facilitate a smooth transition to a more secure email environment.

BSI President Claudia Plattner emphasizes a cooperative strategy rather than regulatory measures to advance the Cyber Nation initiative. The Hall of Fame will provide visibility to all participants, recognizing their efforts in improving email security.

For inquiries or suggestions, organizations can reach out to the BSI via email at emailsicherheit@bsi.bund.de. The Hall of Fame for the Year of Email Security 2025 will be unveiled on August 23 and 24 during the German government's open house event.