The BSI is a federal office dedicated to IT security, not a company. It's more or less the German NSA, just without the spying part. That's done by other offices.