IT-Grundschutz-Kompendium

The IT Basic Protection of the Federal Office for Information Security (BSI) is a proven methodology to enhance the level of information security in authorities and companies of all sizes. The offerings of IT Basic Protection are considered a benchmark in administration and business when it comes to securing information and establishing an Information Security Management System (ISMS). Due to its compatibility with ISO standards (particularly ISO/IEC 27001:2013), IT Basic Protection is also recognized internationally. The individual topics described in the IT Basic Protection Compendium reflect typical areas and aspects of information security within an institution. The range covers overarching topics such as security management, data protection, or data backup concepts, as well as specific components of an IT or ICS environment (Industrial Control Systems). The revision has ensured that the concerns of small and medium-sized enterprises are appropriately addressed. Those responsible for information security in institutions of any size receive support from the IT Basic Protection Compendium to realistically assess the existing security level and identify and fulfill the necessary security requirements for protection. IT Basic Protection provides the right solution for every need. The IT Basic Protection Compendium is updated annually. Current status: 6th edition, February 2023.