A German methodology and control catalogue from the Federal Office for Information Security (BSI) for building and certifying information security.
IT-Grundschutz is the BSI's approach to information security in Germany. It pairs a methodology in the BSI standards with the IT-Grundschutz Compendium, a large catalogue of modules and concrete safeguards.
Organizations can achieve ISO/IEC 27001 certification on the basis of IT-Grundschutz. It is especially common in German public administration and among operators of critical infrastructure.
Related frameworks