01
WIBA: the road into Basis-Absicherung
The complete BSI WIBA questionnaire lives in the tool. Every answer is mapped to the matching requirements of the Grundschutz compendium and creates the data base for everything that follows.
Municipalities, cities and districts
From WIBA to Grundschutz++: one path, one tool.
KaitoSec brings the WIBA questionnaire, the municipal IT-Grundschutz profile and the Grundschutz compendium together in one data model. What you answer for WIBA feeds Basis-Absicherung; what you implement there carries through to Grundschutz++.
The municipal offer
- WIBA questionnaire
- Included
- On-premise
- Included
- Advisory session
- 1× per month
- Procurement
- Direct award
The starting point
Obligations grow faster than budgets.
Attacks on local government have become routine, cyber insurers ask for evidence, and NIS2 plus sector-specific standards are closing in on municipal utilities. ISMS software keeps requirements, responsibilities and evidence together even when the information security officer role remains a side duty next to day-to-day work.
The BSI has built graded entry points: WIBA for the first steps, the municipal IT-Grundschutz profile as a proven scope, Basis- and Standard-Absicherung above it. What has been missing is a tool that connects these stages instead of opening a new project for each one.
The path
Four stages, one body of data.
Each stage continues on the data of the previous one. No answer is entered twice, no result ends up in a binder.
02
Municipal IT-Grundschutz profile
The Grundschutz profile for municipal administrations serves as the template for your information domain: adopt the module scope, adapt it to your own specialised procedures, derive the audit plan.
03
Basis- and Standard-Absicherung
Modelling, the IT-Grundschutz check, risk analysis under BSI standard 200-3, treatment planning and reports run in the same tool, without a consulting project alongside.
04
Grundschutz++ ready
Catalogues and evidence are OSCAL-based and machine-readable. When the machine-readable Grundschutz arrives, you carry your data forward instead of re-entering it.
Catalogues
What is ready for municipalities.
The catalogues are linked: one implemented requirement proves itself in every standard that contains it.
WIBA
Road into Basis-Absicherung
The complete questionnaire, every question mapped to Grundschutz requirements.
PROFILE
Municipal IT-Grundschutz profile
The proven module scope for municipal administrations as the starting point for modelling.
BSI GS
BSI IT-Grundschutz
Compendium, modelling, Grundschutz check and risk analysis under BSI standards 200-1 to 200-3.
G++
Grundschutz++
OSCAL-native catalogues and exports, prepared for the coming machine-readable Grundschutz.
B3S
B3S waste management
The sector-specific security standard for municipal waste utilities, in the same set of controls.
NIS2
NIS2 and KRITIS
Operator duties of municipal companies, mapped onto the same controls instead of maintained separately.
Our contribution to Germany as a cyber nation
Implement standards despite tight budgets.
Security across the country rarely fails for lack of will. It fails on procurement procedures, operating costs and missing exchange. The municipal offer addresses these three points.
01
Prices below the procurement threshold
Every tier stays below the value limits for a direct award. You procure without a tender procedure and receive the full product, not a reduced municipal edition.
02
On-premise without a project budget
Running KaitoSec in your own or a municipal data centre is standard, not a surcharge. The installation is deliberately kept simple, because we know from experience that operations otherwise break the budget.
03
Advisory circle and municipal network
Once a month, a cyber security consultant from the pool works with you on the state of your implementation. In the same circle, municipalities connect with each other, so knowledge spreads across the country.
Before, after
Grundschutz as operations, not as a project.
The same standard, a different operating model.
- Grundschutz as a project
- Grundschutz with KaitoSec
- The WIBA form is filled in as a PDF and filed away.
- WIBA answers live in the tool and feed the Grundschutz requirements.
- Every stage from WIBA to Standard-Absicherung starts as a new project.
- Every stage continues on the data of the one before.
- Consulting hours go into status surveys and document upkeep.
- The monthly advisory session works on decisions, not on forms.
- Procurement means a tender procedure with an open timeline.
- Direct award below the value limits, start without a procedure.
- A vendor's cloud requirement collides with data centre rules.
- On-premise in your own operation, with the same feature set.
- Evidence for auditors and insurers is compiled anew every time.
- Reports come from the live body of data.
Questions from municipalities
Frequent questions.
Does KaitoSec cover the WIBA questionnaire completely?
Yes. The Road into Basis-Absicherung catalogue lives in the tool in full, and every question is mapped to the requirements of the Grundschutz compendium. Your answers persist when you move on to Basis-Absicherung.
Can we use the municipal IT-Grundschutz profile?
Yes. The profile serves as the template for modelling your information domain. You adapt the module scope to your specialised procedures; the audit plan derives from it.
What does Grundschutz++ ready mean?
Catalogues, requirements and evidence are stored OSCAL-based and machine-readable. Your body of data is prepared for the coming machine-readable Grundschutz, without re-entry.
How does procurement work without a tender?
Prices sit below the procurement thresholds, so a direct award is possible. Your procurement office checks the value limits that apply in your state; we provide the required documents.
What does the on-premise installation need?
A server in your own or a municipal data centre. The installation is designed for operation without a dedicated project team; we clarify the technical prerequisites in a short call beforehand.
How does the monthly advisory session work?
Once a month, a cyber security consultant from our pool walks through status, open items and next steps with you. The session spans municipalities: you hear how other administrations solve the same requirements, and connect directly.
Does KaitoSec support the B3S for waste management?
Yes. Municipal waste utilities work with the sector-specific security standard in the same tool. Overlaps with Grundschutz prove themselves through the mapping.
Next step
Talk to us about your municipality.
Bring your current state: WIBA started, profile planned, or right at the beginning. We show you on your concrete case what the entry looks like, what it costs and how direct-award procurement runs.