IT-Grundschutz is the methodology of the German Federal Office for Information Security (BSI) for establishing systematic information security. Its standards describe the management process, methodology and risk analysis; the IT-Grundschutz Compendium contains modules for typical processes and technologies.
Organizations model their information domain, determine protection needs, compare existing safeguards with requirements and treat remaining risks. IT-Grundschutz can support an ISMS and certification, but the method is also usable without seeking a certificate.
What is the practical strength?
The reusable modules provide concrete orientation for common systems. They still require accurate modeling and responsible implementation. Copying requirements without understanding assets, dependencies and higher protection needs does not create security.
Thank you for your feedback! We will review it and optimize this content.