Working in the Grundschutz++ Domain
In the Grundschutz++ (GS++) domain, you map the BSI's Grundschutz++ methodology to your institution. Grundschutz++ is the further development of IT-Grundschutz: the modules of the IT-Grundschutz Compendium are replaced by a machine-readable requirements catalog from the BSI's state-of-the-art library. From this catalog, you compile an individual Anforderungspaket (requirements package) for your Informationsverbund (information domain) using Praktiken (practices) and Zielobjektkategorien (target object categories).
The methodology follows a PDCA cycle with five process steps. This manual is structured along these steps:
- Get to know the Grundschutz++ methodology and the differences from IT-Grundschutz.
- Get to know the Grundschutz++ domain and the requirements catalog.
- Get an overview of a fully modeled example with the profile of the domain.
- Process step 1 – Erhebung und Planung (survey and planning): Define the institution, Anwendungsbereich (scope of application) and business processes (survey and planning) and carry out the Schutzbedarfsfeststellung (protection need assessment).
- Process step 2 – Anforderungsanalyse (requirements analysis): Delimit the Informationsverbund and record the assets, assign them to Zielobjektkategorien and compile the Anforderungspaket.
- Process step 3 – Realisierung (realization): Determine the implementation status and plan the implementation.
- Where required, carry out the Risikobetrachtung (risk consideration).
- Process steps 4 and 5 – Überwachung (monitoring) and kontinuierliche Verbesserung (continuous improvement): Keep your ISMS up to date with monitoring and improvement.
Status of the methodology
Grundschutz++ is in its introduction and trial phase. This manual is based on the Leitfaden (guide) to the Grundschutz++ methodology (March 2026) and the Pilotierungsfassung (pilot version) of the methodology in version 0.2 (31.07.2026), which incorporates the feedback from the pilot phase. Where the two versions differ, the manual describes the state of the Pilotierungsfassung and points out the earlier state.