BSI TR-03109-6 / SMGWA – Audit of a Smart Meter Gateway Administrator
On this page
What is BSI TR-03109-6 / SMGWA?
A smart meter gateway is the central communication unit in an intelligent metering system. To ensure the interaction of the various systems, the security requirements set out in the protection profile for the smart meter gateway were defined by the German Federal Office for Information Security (BSI) in the technical guideline BSI TR-03109. An audit to BSI TR-03109-6 therefore allows you to demonstrate the secure use of intelligent metering systems. RSM Certification GmbH has appropriately certified smart meter gateway auditors who are listed with the BSI.
In recent years, smart meter gateways have become the central technology in the digitalisation of the energy sector. This platform enables communication between the systems of the consumer, the electricity supplier and the network operator. Alongside the laws governing their operation, the requirements are correspondingly higher – both in terms of data protection and, in particular, information security.
In addition to the smart meter gateway, the smart meter gateway administrator (BSI TR-03109-6) must also hold a BSI certificate. Our accreditation by the German Accreditation Body (DAkkS), including for ISO/IEC 27001, guarantees that we have implemented high internal quality standards (including to DIN EN ISO/IEC 17021), which are regularly reviewed for effectiveness by DAkkS. Furthermore, accreditation ensures the national and international recognition of your certificate.
Your benefits
Your path to a certified SMGWA
Submit an enquiry and optionally arrange an introductory meeting via video call at short notice
Quotation
Complete our basic data as a basis for an initial understanding of your organisation and for preparing the quotation
Place the order with RSM Certification GmbH and jointly coordinate the next steps (including scheduling)
Only for an initial certification: to gain a better understanding of your organisation and your ISMS, we usually carry this out in a joint remote session. Aim: to determine certification readiness
Conducting the Stage 2 audit / recertification audit, the effectiveness review of your ISMS
Technical review of the auditor(s)' documentation and the certification decision by RSM Certification GmbH
Issuing a confirmation of conformity
Handover of the audit report, the certificate and the certification seal
Reviewing the continuous development of the ISMS as part of the surveillance audits
Certification by RSM Certification GmbH
Would you like us to certify you? Feel free to get in touch with us without obligation.
Get in touch without obligation
FAQ
The smart meter gateway administrator (SMGW Admin) is required to have a certified Information Security Management System (ISMS) to ISO/IEC 27001 or ISO 27001 based on IT-Grundschutz, as well as BSI TR-03109-6. Certification to the IT Security Catalogue pursuant to Section 11 (1a) EnWG covers ISO/IEC 27019 in addition to ISO/IEC 27001. The IT Security Catalogue pursuant to Section 11 (1a) EnWG is therefore also suitable for meeting the requirements.
In our experience, BSI TR-03109-6 audits and ISO/IEC 27001 or IT Security Catalogue pursuant to Section 11 (1a) EnWG audits are frequently carried out in combination.
The German Federal Office for Information Security (BSI) has developed audit standards for smart meter gateway audits in the form of protection profiles and technical guidelines. The protection profiles contain generic minimum security requirements; the technical guidelines contain functional specifications to ensure interoperability between the systems as well as further detail on the protection profiles. The technical guideline BSI TR-03109 covers the requirements for functionality, interoperability and security that the individual components in a smart metering system must meet.
- BSI TR-03109-1: Technical Guideline Smart Meter Gateway (SMGW)
- BSI TR-03109-2: Technical Guideline Security Module for SMGW
- BSI TR-03109-3: Technical Guideline (Cryptographic specifications for SMGW)
- BSI TR-03109-4: Technical Guideline (Public key infrastructure for SMGW)
- BSI TR-03109-5: Technical Guideline Communication Adapter
- BSI TR-03109-6: Technical Guideline SMGW Administration
Due to legal requirements, smart meter gateways must undergo a one-off certification audit for market access. This is governed by Section 24 of the Metering Point Operation Act (MsbG). In addition to the smart meter gateway, the smart meter gateway administrator (BSI TR-03109-6) must also hold a BSI certificate.
The smart meter gateway administrator (SMGW Admin) is required to have a certified Information Security Management System (ISMS) to ISO/IEC 27001, the IT Security Catalogue pursuant to Section 11 (1a) EnWG, or ISO 27001 based on IT-Grundschutz, as well as BSI TR-03109-6. This must be carried out by an auditor certified in accordance with BSI TR-03109-6. In addition, penetration tests must be performed by security service providers certified by the BSI.
The BSI provides a documentation template, which must be used.
Yes, you can combine your SMGWA BSI TR-03109-6 audit with an audit to ISO/IEC 27001, ISO 27001 based on IT-Grundschutz, or the IT Security Catalogue pursuant to Section 11 (1a) EnWG. Please feel free to talk to us about this.
For sensible and reliable planning on all sides, we would like a lead time of approximately three months. However, the postponement of audits can repeatedly open up shorter-term opportunities to carry out an audit after all.
So please get in touch with us directly to discuss your requirements personally.
Auditors from RSM Certification GmbH may audit BSI TR-03109-6 only. We are not permitted to audit the smart meter gateway for market access.