1. Home
  2. Insights
  3. Blog
  4. BSI lists Airbus Protect as qualified APT response service provider
On 2023-10-06
Cybersecurity

BSI lists Airbus Protect as qualified APT response service provider

Airbus Protect qualified as APT response service provider

Airbus Protect passed the examination of the Federal Office for Information Security (BSI) in July 2023 and is henceforth listed as a qualified APT response service provider.

Massive cyber attacks on companies and government institutions are becoming increasingly frequent. In the case of targeted attacks by strong adversaries, the so-called Advanced Persistent Threats (APT), the defence against ongoing or successful attacks places special demands on the service providers used in this context. That's why BSI qualification is so important.

Summary

Airbus Protect examination of the Federal Office for Information Security (BSI) in July 2023

Which service providers are really able to defend against an APT attack? 

The answer to this question can be found in the list of qualified APT response service providers compiled by the BSI. We are proud to announce that Airbus Protect has been included in it after successfully passing the examination process.

This makes us one of the few companies in Germany to meet the BSI’s strict standards for the provision of APT response services. The qualification by the BSI underlines that Airbus Protect has experts capable of providing effective emergency and crisis management even in the most sophisticated cyber attacks.

For the audit, Airbus Protect had a team of incident responders and SOC analysts.

In the first step of the audit process, Airbus Protect first had to provide complete documentation. This included descriptions of the products and services as well as explanations regarding compliance with the criteria set by the BSI. 

In a second step, a technical interview was conducted with the BSI in a meeting lasting several hours. In order to benefit from the internal cooperation and knowledge exchange between the specialist departments, a mixed team of incident responders and SOC analysts competed for Airbus Protect. Using fictitious scenarios, the team had to show that they were able to handle the situations in a professional and targeted manner. Attention was paid to the general procedure as well as to questions asked and processing of information received.

Are you prepared against APT attacks? Prepare for the emergency now.

The Airbus Protect CSIRT team is a group of experts dedicated to combating cyber attacks. Our experts have extensive experience across a diverse range of industries, including media, financial services, industrial manufacturing, governments and more, to help you respond quickly and eliminate threats that threaten your business continuity.

In addition to our BSI qualification, other international certifications such as ISO, ANSSI, and first place in Splunk’s global “Boss of the SOC” competition highlight our expertise and demonstrate the high quality of the solutions and consulting services we offer. Would you like to learn more? Get in touch with us now!

  • Share

More on Cybersecurity

Dead disk analysis with Velociraptor Cybersecurity

Performing Linux Dead Disk Forensic Analysis with Velociraptor

What is Velociraptor? Velociraptor is an open source digital forensic and incident response tool that supports several deployment models depending on the investigation scenario. While the most common approach is the client-server model, where agents are deployed on endpoints and communicate with a central server, Velociraptor can also operate through offline collectors or virtual clients [...]

Read more
it-sa 2026: Pragmatic OT Asset Management as the foundation for NIS 2 and ISO 27001 Cybersecurity

it-sa 2026: Pragmatic OT Asset Management as the foundation for NIS 2 and ISO 27001

The digitalisation of production continues to advance, but with increased connectivity comes a growing attack surface. At it-sa in Nuremberg on 28 October 2026, we will be demonstrating why a complete asset inventory is no longer just a 'nice-to-have' and how you can achieve visibility without putting your production at risk. Anyone who lacks detailed [...]

Read more
What the Shell? Accelerating Incident Response: Letting the Malware do the work for you Cybersecurity

What the Shell? Accelerating Incident Response: Letting the Malware do the work for you

Intrusion Context Last month, Airbus Protect’s CSIRT responded to an intrusion targeting a vulnerable, internet-facing Windows Server. What began as typical automated scanning quickly transitioned into a targeted attack utilising tools such as SQLMap and vulnerability scanners. By leveraging a flurry of SQL injection attacks, the threat actor successfully enabled xp_cmdshell which facilitated remote code [...]

Read more