BSI NESAS Product Certification Scheme (NESAS-Produkte)
Germany's BSI scheme for certifying mobile network equipment under the GSMA NESAS framework: what applicants and vendors must submit and do through the process audit, the SCAS-based product evaluation and certification, how certificates are maintained through minor updates and recertification, and the Impact Analysis Report.
BSI NESAS Product Certification Scheme (NESAS-Produkte) is a compliance framework from Germany with 6 domains and 33 controls. The largest domains are Clause 3.3: Certification process (preparation, audit, evaluation, certification) – BSI NESAS Product Certification Scheme (NESAS-Produkte) (16 controls), Clause 5: Special framework conditions – BSI NESAS Product Certification Scheme (NESAS-Produkte) (6 controls), Clauses 3.1 and 3.2: Bodies involved and the object of conformity assessment – BSI NESAS Product Certification Scheme (NESAS-Produkte) (5 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (6)
Annex A: Impact Analysis Report – BSI NESAS Product Certification Scheme (NESAS-Produkte)
| Code | Title |
|---|---|
| bsi-nesas-product-certification-scheme-nesas-produkte::A.1-2 | Impact Analysis Report: identification, basis and description of changes |
| bsi-nesas-product-certification-scheme-nesas-produkte::A.3-4 | Impact Analysis Report: reuse of results and annexes |
Clause 3.3: Certification process (preparation, audit, evaluation, certification) – BSI NESAS Product Certification Scheme (NESAS-Produkte)
| Code | Title |
|---|---|
| bsi-nesas-product-certification-scheme-nesas-produkte::3.3.2.1 | Preparation phase tasks of the vendor |
| bsi-nesas-product-certification-scheme-nesas-produkte::3.3.2.3 | Application form, language and third-party declarations |
| bsi-nesas-product-certification-scheme-nesas-produkte::3.3.3.1 | Audit phase: scope, site, preparation and impartiality |
| bsi-nesas-product-certification-scheme-nesas-produkte::3.3.3.2 | Process documentation submitted to the lead auditor over the encrypted exchange platform |
| bsi-nesas-product-certification-scheme-nesas-produkte::3.3.3.3a | Cooperation during the audit: encryption, schedule, clarifications and resources |
| bsi-nesas-product-certification-scheme-nesas-produkte::3.3.3.3b | Audit result, re-audit within three months and the audit report |
| bsi-nesas-product-certification-scheme-nesas-produkte::3.3.4.1 | Evaluation phase: SCAS selection, valid audit and impartiality |
| bsi-nesas-product-certification-scheme-nesas-produkte::3.3.4.2a | Document mitigation of every TR 33.926 threat |
| bsi-nesas-product-certification-scheme-nesas-produkte::3.3.4.2b | Evidence package delivered to the evaluation facility |
| bsi-nesas-product-certification-scheme-nesas-produkte::3.3.4.2c | Software bill of materials and vulnerability analysis |
| bsi-nesas-product-certification-scheme-nesas-produkte::3.3.4.2d | Architectural overview of the network product |
| bsi-nesas-product-certification-scheme-nesas-produkte::3.3.4.3a | Cooperation during the evaluation: schedule, kick-off, remote and external testing, corrections |
| bsi-nesas-product-certification-scheme-nesas-produkte::3.3.4.3b | Corrected product versions during evaluation and the Impact Analysis Report |
| bsi-nesas-product-certification-scheme-nesas-produkte::3.3.5a | Certification phase: draft report, hearing and objection |
| bsi-nesas-product-certification-scheme-nesas-produkte::3.3.5b | Archive the evaluation evidence for the certificate's validity plus three years |
| bsi-nesas-product-certification-scheme-nesas-produkte::3.3.5c | Costs, ancillary provisions and the code of symbols |
Clause 4: Maintenance of the certification – BSI NESAS Product Certification Scheme (NESAS-Produkte)
| Code | Title |
|---|---|
| bsi-nesas-product-certification-scheme-nesas-produkte::4.1a | Conditions for including a minor update in an existing certificate |
| bsi-nesas-product-certification-scheme-nesas-produkte::4.1b | Apply for inclusion with an Impact Analysis Report and, where needed, a laboratory report |
| bsi-nesas-product-certification-scheme-nesas-produkte::4.2 | Recertification of a modified product and reuse of earlier test results |
Clause 5: Special framework conditions – BSI NESAS Product Certification Scheme (NESAS-Produkte)
| Code | Title |
|---|---|
| bsi-nesas-product-certification-scheme-nesas-produkte::5.2 | Confidentiality and encrypted document exchange |
| bsi-nesas-product-certification-scheme-nesas-produkte::5.3.2 | Evaluation contract and schedule discipline |
| bsi-nesas-product-certification-scheme-nesas-produkte::5.3.3 | Validity of criteria, interpretations and referenced documents |
| bsi-nesas-product-certification-scheme-nesas-produkte::5.3.4 | Reuse of evaluation results |
| bsi-nesas-product-certification-scheme-nesas-produkte::5.4.1 | What the certificate covers and how its users must treat it |
| bsi-nesas-product-certification-scheme-nesas-produkte::5.4.2 | Time limits: two-year audit validity and two-year certificate validity |
Clauses 3.1 and 3.2: Bodies involved and the object of conformity assessment – BSI NESAS Product Certification Scheme (NESAS-Produkte)
| Code | Title |
|---|---|
| bsi-nesas-product-certification-scheme-nesas-produkte::3.1.1 | Applicant's duty to participate and to disclose vulnerabilities and incidents |
| bsi-nesas-product-certification-scheme-nesas-produkte::3.1.3 | Commission a recognised evaluation facility |
| bsi-nesas-product-certification-scheme-nesas-produkte::3.2.1 | Development and lifecycle processes that meet the NESAS security requirements |
| bsi-nesas-product-certification-scheme-nesas-produkte::3.2.2a | Assign the network product to a valid audit and an evaluable product class |
| bsi-nesas-product-certification-scheme-nesas-produkte::3.2.2b | Threat mitigation scope and the operational environment |
Clauses 6 and 7: Publication and references – BSI NESAS Product Certification Scheme (NESAS-Produkte)
| Code | Title |
|---|---|
| bsi-nesas-product-certification-scheme-nesas-produkte::6.1 | Publication of certificates and the consequence of withholding consent |
What is BSI NESAS Product Certification Scheme (NESAS-Produkte) and who does it apply to?
BSI NESAS Product Certification Scheme (NESAS-Produkte) is a compliance framework from Germany with 6 domains and 33 controls. Germany's BSI scheme for certifying mobile network equipment under the GSMA NESAS framework: what applicants and vendors must submit and do through the process audit, the SCAS-based product evaluation and certification, how certificates are maintained through minor updates and recertification, and the Impact Analysis Report. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does BSI NESAS Product Certification Scheme (NESAS-Produkte) actually require?
BSI NESAS Product Certification Scheme (NESAS-Produkte) has 33 controls organised across 6 domains. The largest domains are Clause 3.3: Certification process (preparation, audit, evaluation, certification) – BSI NESAS Product Certification Scheme (NESAS-Produkte) (16 controls), Clause 5: Special framework conditions – BSI NESAS Product Certification Scheme (NESAS-Produkte) (6 controls), Clauses 3.1 and 3.2: Bodies involved and the object of conformity assessment – BSI NESAS Product Certification Scheme (NESAS-Produkte) (5 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of BSI NESAS Product Certification Scheme (NESAS-Produkte) do I already cover?
BSI NESAS Product Certification Scheme (NESAS-Produkte) does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.
How do I implement BSI NESAS Product Certification Scheme (NESAS-Produkte)?
Start your BSI NESAS Product Certification Scheme (NESAS-Produkte) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about BSI NESAS Product Certification Scheme (NESAS-Produkte) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 33 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,111 frameworks.
Get Started Free →Free forever, no credit card required