Email Encryptionper NIS2:Implementing §30 BSIG.
Cryptography concepts are mandatory. Automated S/MIME & PGP encryption meets §30 (2) No. 8 & No. 10 BSIG – without manual effort.
The BSIG defines clear requirements for the use of cryptographic methods in companies.
Concepts and procedures for the use of cryptographic methods. Encryption of data in transit and at rest, key management and selection of appropriate algorithms.
Secured voice, video and text communication and secured emergency communication within the institution.
Security in the supply chain including communication between institutions.
Instead of manual configuration and certificate chaos – automatic encryption directly in the mail flow.
Outgoing emails are automatically encrypted and signed based on routing rules. No manual intervention by employees required.
PKI and MPKI integration with automatic certificate issuance, renewal and revocation. Full control over the entire lifecycle.
Partners without S/MIME or PGP receive encrypted messages via the Secure Message Portal. No setup required at the recipient end.
Exclusively state-of-the-art algorithms. Automatic updates when new BSI recommendations are released.
Every encryption, signature and delivery is logged in a tamper-proof manner. Compliance evidence at the push of a button.
Configurable TLS policies per domain. Enforced TLS prevents unencrypted transport of sensitive emails.
| Manual Encryption | Native Microsoft 365 | Conbool SecureMail | |
|---|---|---|---|
| Effort per email | High – manual for each email | Medium – transport rules | Zero – automatic at gateway |
| Protocols | S/MIME or PGP (not both) | OME (proprietary) | S/MIME + PGP + Portal |
| Recipients without certificate | Not possible | Link to Microsoft portal | Own Secure Message Portal |
| BSI TR-02102 compliant | Depends on client | Partially | Fully |
| Audit trail | None | Limited | Complete & tamper-proof |
| NIS2 compliance evidence | Difficult to prove | Partially documentable | Full evidence |
Verify domain and set MX record to Conbool. Your mail flow runs through the secure gateway from now on.
Provision S/MIME certificates, import PGP keys and define routing rules for automatic encryption.
Enable tracing and audit logs. From now on you have complete compliance evidence for NIS2 audits.
Both standards compared – with recommendations for different company sizes.
Why §30 No. 5 also affects companies not directly under NIS2.
What businesses need to know about the encryption obligation under §30 BSIG.
S/MIME, PGP and Secure Message Portal – automated, auditable and BSI-compliant.