Complass
BSI IT-Grundschutz in practice: approach, effort and the road to certification
A customer asks about IT-Grundschutz, the Compendium has 111 modules, and the first spreadsheet is already a maze. How to follow the BSI method step by step and how long it takes.
IT-Grundschutz is the BSI method for an information security management system. It does not only set a framework but gives concrete requirements in 111 modules – and leads to the certification "ISO 27001 on the basis of IT-Grundschutz", issued by the BSI itself.
The whitepaper explains Basic, Core and Standard Protection, structure analysis and protection requirements, modeling with modules, the IT-Grundschutz check, risk analysis under BSI Standard 200-3, implementation plan and certification, the link to ISO 27001, NIS2 and Grundschutz++ and the typical effort – with a 10-step plan and a checklist. BSI texts are not quoted but paraphrased with a chapter reference.
Each method chapter includes a short "Implementation in Complass" box with a platform screenshot: only features already live are named.
15 pages · Version 1.1 · as of · Author Marc Linden, Complass GmbH
Try Complass with your own data
Set up your trial yourself, with a sample project per framework if you like. If you would rather see Complass first, request a demo.