BSI IT-Grundschutz anchors

Stefan Coetzeecreated 2026-05-12updated 2026-05-121 min readanchors

Vault note, not reviewed against the source. Written in the knowledge vault on 2026-05-12 by models working with Stefan Coetzee and published as it stands, with private addresses, e-mail addresses and an employer name redacted. Check claims against the primary source before relying on them.

Primary documents

BSI Standard 200-1: ISMS
BSI Standard 200-2: IT-Grundschutz Methodologie
BSI Standard 200-3: Risikoanalyse auf der Basis von IT-Grundschutz
BSI Standard 200-4: Business Continuity Management
IT-Grundschutz Kompendium (annual edition; current 2024/2025)
IT-Grundschutz Gefährdungskatalog (threat catalog)
IT-Grundschutz Profile for specific scenarios

All free from BSI.

Operating body

BSI (Bundesamt für Sicherheit in der Informationstechnik) — Bonn-based. Federal authority under BMI (Bundesministerium des Innern und für Heimat).

BSIG (Gesetz über das Bundesamt für Sicherheit in der Informationstechnik) — BSI law.
BSI-Kritisverordnung — KRITIS sector and threshold definitions.
NIS2UmsuCG — NIS2 transposition.

Certified auditors

BSI-zertifizierte Auditoren — BSI-licensed auditors for IT-Grundschutz certification.
DAkkS-accredited certification bodies for ISO 27001 auf Basis IT-Grundschutz.

Industry resources

TeleTrusT — German IT security association.
Bitkom — German tech industry association.
Allianz für Cybersicherheit — BSI-hosted multi-stakeholder platform.

Reference resources

bund.de/bsi — BSI hub.
bund.de/bsi/IT-Grundschutz — Grundschutz hub.
bsi.bund.de/dok/IT-Grundschutz-Kompendium — Kompendium download.