IT Baseline Protection (BSI)

IT-Grundschutz is the Federal Office for Information Security (Germany) (BSI)'s methodology for building information security, described in BSI standards 200-1 to 200-4 and the IT-Grundschutz Compendium. For typical building blocks it provides concrete requirements instead of deriving every measure from a separate risk analysis. Certification to ISO/IEC 27001 — Information Security Management System (ISO 27001) on the basis of IT-Grundschutz is possible.