IT-Grundschutz

For companies and authorities, basic IT protection is the BSI's tried and tested offer to establish a holistic and systematic management system for information security (ISMS) in an institution. For more than 25 years, it has been the reliable method in the everyday work of those responsible in public authorities and companies: Which requirements for information security are important, which regulations must be defined? In order to be able to deal with these questions in a well-founded and practical manner, IT-Grundschutz provides the basics and the tools with the BSI standards and the IT-Grundschutz Compendium. IT-Grundschutz-Kompendium 2021: Innovations The new edition of the IT-Grundschutz Compendium with 97 IT-Grundschutz modules will be published in February 2021. A new module sheds light on information security in vehicles and thus represents an important thematic development in the IT-Grundschutz-Kompendium. The topic of developing web applications is also completely new. This IT-Grundschutz module extends the previous portfolio of topics in the "Concepts and procedures" layer. In addition to these new modules, one of the main focuses of the technical editing for Edition 2021 was to eliminate duplications in the requirements and thus standardise and streamline the modules. A positive effect for the users is a significant reduction in effort if they want to meet future requirements or implement measures. And the IT basic protection check can also be carried out more quickly and efficiently once the redundancies have been removed. New BSI standard in the works: from emergency management to business continuity management The BSI standard 100-4: Emergency Management shows a systematic way to set up an emergency management in a public authority or a company. This standard is currently being updated and will be replaced in future by the BSI standard 200-4: Business Continuity Management.