Municipalities, cities and districts
From WIBA to Grundschutz++ without entering anything twice.
KaitoSec brings the WIBA questionnaire, the municipal IT-Grundschutz profile and the Grundschutz compendium together in one data model. What you answer for WIBA feeds Basic Protection (Basis-Absicherung); what you implement there carries through to Grundschutz++.
5.0 out of 5
Four stages on the same data.
WIBA: the road into Basic Protection
The complete BSI WIBA questionnaire lives in the tool. Every answer is mapped to the matching requirements of the Grundschutz compendium and creates the data base for everything that follows.
Municipal IT-Grundschutz profile
The Grundschutz profile for municipal administrations serves as the template for your information domain: adopt the module scope, adapt it to your own specialised procedures, derive the audit plan.
Basic and Standard Protection
Modelling, the IT-Grundschutz check, risk analysis under BSI standard 200-3, treatment planning and reports run in the same tool, without a consulting project alongside.
Inherent riskResidual riskGrundschutz++ ready
Catalogues and evidence are OSCAL-based and machine-readable. When the machine-readable Grundschutz arrives, you carry your data forward instead of re-entering it.
Implement standards despite tight budgets.
Security across the country rarely fails for lack of will. It fails on procurement procedures, operating costs and missing exchange. The municipal offer addresses these three points.
Procurement without a tender
Every tier stays below the value limits for a direct award. You procure without a tender procedure and receive the full product, not a reduced municipal edition.
On-premise without a project budget
Running KaitoSec in your own or a municipal data centre is standard, not a surcharge. The installation is deliberately kept simple, because we know from experience that operations otherwise break the budget.
Advisory circle and municipal network
At regular intervals, a cyber security consultant from the pool works with you on the state of your implementation. In the same circle, municipalities connect with each other, so knowledge spreads across the country.
Target objects and network come from the systems you already use.
100+ integrations
All integrations
Matching standards and modules
Relevant requirements
How KaitoSec supports the work
Frequent questions.
Does KaitoSec cover the WIBA questionnaire completely?
Yes. The WIBA catalogue (road into Basic Protection) lives in the tool in full, and every question is mapped to the requirements of the Grundschutz compendium. Your answers persist when you move on to Basic Protection.
Can we use the municipal IT-Grundschutz profile?
Yes. The profile serves as the template for modelling your information domain. You adapt the module scope to your specialised procedures; the audit plan derives from it.
What does Grundschutz++ ready mean?
Catalogues, requirements and evidence are stored OSCAL-based and machine-readable. Your body of data is prepared for the coming machine-readable Grundschutz, without re-entry.
How does procurement work without a tender?
Every tier stays below the procurement thresholds, so a direct award is possible. Your procurement office checks the value limits that apply in your state; we provide the required documents.
What does the on-premise installation need?
A server in your own or a municipal data centre. The installation is designed for operation without a dedicated project team; we clarify the technical prerequisites in a short call beforehand.
How does the advisory session work?
At regular intervals, a cyber security consultant from our pool walks through status, open items and next steps with you. The session spans municipalities: you hear how other administrations solve the same requirements, and connect directly.
Does KaitoSec support the B3S for waste management?
Yes. Municipal waste utilities work with the sector-specific security standard in the same tool. Overlaps with Grundschutz prove themselves through the mapping.
Bring calm to your working week.
A personal demo in 30 minutes: we go through where you stand, from WIBA to Standard-Absicherung, and show how procurement by direct award works.