BSI IT-Grundschutz-Kompendium (Edition 2023)
IT-Grundschutz without the spreadsheets
German public bodies, critical infrastructure and many of their suppliers work to the BSI's IT-Grundschutz. CloudSignLab lists the modules of the Kompendium, lets you record which apply to you and shows your readiness from the controls you already have.
What IT-Grundschutz asks of you
Structure analysis
Know your processes, applications, IT systems, networks and rooms, and how they depend on each other.
Protection needs
Rate how much confidentiality, integrity and availability each part needs: normal, high or very high.
Modelling
Choose the modules of the Kompendium that fit each part of your information network.
Check and improve
Check which requirements are met, plan what is missing and review it regularly; certification is ISO 27001 on the basis of IT-Grundschutz.
How CloudSignLab helps
All 111 modules
The modules of the Kompendium in ten layers, from security management to infrastructure, with your decision on each.
Readiness from your controls
Library controls already count for the modules they cover, so your NIS2 or ISO 27001 work also counts here.
Modelling with reasons
Mark the modules that do not apply and say why, so your auditor sees your decisions in one list.
Evidence and audits
Evidence linked to each control and internal audits with findings followed up until they are closed.
Questions about IT-Grundschutz
Do I need IT-Grundschutz?
Federal bodies must apply it, and many public clients and critical infrastructure operators ask their suppliers for it. For other companies it is a well-structured way to build an ISMS.
Does CloudSignLab include the BSI requirement texts?
No. We use the module codes and our own short titles; the requirement texts are published free of charge by the BSI. Your controls and evidence show how you meet them.
Which edition do you use?
The IT-Grundschutz-Kompendium, Edition 2023, which remains the basis for certification during the move to Grundschutz++.
Get ready for IT-Grundschutz
Start free, see which modules apply to you and what is still missing.