Standards and frameworks · Governance and coordination

BSI IT-Grundschutz (BSI-Standards 200-1–200-4, Kompendium, BSI-Standard 300-1) IT-Grundschutz

PublishedFree · 26 October 2026

Summary

IT-Grundschutz from the German Federal Office for Information Security is a comprehensive method for building and running an information security management system. The BSI 200 standards lay down its foundations: ISMS requirements (200-1), a method for modelling one’s environment and selecting measures with three approaches, basic, standard and focused on the most critical systems (200-2), risk analysis where protection needs are high (200-3) and business continuity (200-4). The Kompendium gathers the modules (Bausteine), organised into ten layers from applications to industrial systems, each with typical threats and requirements. It is widely used by German public administration and supports ISO/IEC 27001 certification on the basis of IT-Grundschutz.

Reference

BSI IT-Grundschutz (BSI-Standards 200-1–200-4, Kompendium, BSI-Standard 300-1)

Official title

IT-Grundschutz

Body

BSI

Type

Series of standards

Status

Published

Published

26 October 2026

Access to the text

Free

Sectors

• Governance and coordination
• Digital public administration

Notes

BSI is replacing IT-Grundschutz with “Grundschutz++”: on 26 October 2026 it published the new methodology as BSI-Standard 300-1, focused on core business processes and with requirements in machine-readable form, which together with the requirements catalogue (Anwenderkatalog) will take the place of the Kompendium. According to the BSI milestone plan, Grundschutz++ can be certified (ISO/IEC 27001 based on Grundschutz++) from 1 January 2027, with an early-adopter phase until the end of 2027, while certification under the current IT-Grundschutz remains possible until 30 November 2031. The Kompendium in force is the 2023 edition (since 1 February 2023). All documents can be downloaded free from the BSI website; 200-4 draws on ISO 22301.

Last verified

2 November 2026 (verified via web)

Metadata and summary: CC BY 4.0 · JSON

Report an error in this record (opens in a new tab)