Quiz Entry - updated: 2026.07.30
What is the difference between the BSI standards and the IT-Grundschutz-Kompendium?
The BSI standards describe the METHOD (how to manage security and analyze risk); the Kompendium contains the CONTENT (building blocks with threats and requirements).
Two complementary publication families:
BSI standards — the methodology:
| Standard | Content |
|---|---|
| BSI 200-1 | Management systems for information security (ISMS) |
| BSI 200-2 | IT-Grundschutz methodology (how to apply it) |
| BSI 200-3 | Risk analysis based on IT-Grundschutz |
| BSI 100-4 | Emergency management (Notfallmanagement / BCM) |
IT-Grundschutz-Kompendium — the content:
- The Bausteine (building blocks), elementary threats, and implementation guidance
- Organized into process and system block families, 80+ blocks
- Slimmed down to ~816 pages from the over 4000 pages of the old catalogs
Tip: Standards = the recipe book on how to cook; Kompendium = the pantry of ingredients (blocks) you actually use.
Go deeper:
BSI-Standards 200-1/200-2/200-3 (Übersicht) — Methodik: ISMS (200-1), Vorgehensweise (200-2), Risikoanalyse (200-3), BCM (200-4).- IT-Grundschutz-Kompendium (BSI) — Inhalt: Bausteine, elementare Gefährdungen und Anforderungen.