# What is a system for attack detection (System zur Angriffserkennung) under the BSIG?

It means processes, supported by technical tools and organisational integration, that detect attacks on IT systems. They do so by comparing the data processed in those systems with information and technical patterns that indicate attacks. That is the definition in section 2 no. 41 of the BSIG. Section 31(2) requires operators of critical installations to use such systems for the IT systems, components and processes that are decisive for the functioning of their critical installations; the systems must continuously and automatically collect and evaluate suitable parameters and features from ongoing operation, should be able to identify and avoid threats and provide remedies, and should follow the state of the art at a cost proportionate to the consequences of a failure. The definition stresses organisational integration: a tool nobody watches does not meet it. Network detection such as NetSenX can be one technical component; the processes, roles and response around it are yours.

General information, not legal advice. National laws can add to the EU texts quoted here, for example deadlines, forms or reporting channels: check your own country's rules.

FAQ: [Germany: BSIG](https://netsenx.com/en/faq/germany) · https://netsenx.com/en/faq/what-is-a-system-for-attack-detection-under-the-bsig

## Read next

- https://netsenx.com/en/blog/2026-11-07_nis2-germany-bsig
- https://netsenx.com/en/nis2-incident-reporting-deadlines

## Related questions

- [Does the duty to use attack detection apply to SMEs in Germany?](https://netsenx.com/en/faq/does-the-attack-detection-duty-apply-to-smes-in-germany)
- [What does section 30 of the BSIG require from German companies in scope?](https://netsenx.com/en/faq/what-does-section-30-bsig-require)
- [What are the fines under the German BSIG?](https://netsenx.com/en/faq/what-are-the-fines-under-the-bsig)
- [Are managing directors personally liable under the German BSIG?](https://netsenx.com/en/faq/are-german-managing-directors-liable-under-the-bsig)
- [Must management in Germany attend cyber security training under the BSIG?](https://netsenx.com/en/faq/must-german-management-attend-cyber-security-training)