{"id":2718,"date":"2023-12-20T13:54:42","date_gmt":"2023-12-20T13:54:42","guid":{"rendered":"https:\/\/cyber-curriculum.com\/?page_id=2718"},"modified":"2024-04-19T06:23:13","modified_gmt":"2024-04-19T06:23:13","slug":"bsi-it-basic-protection","status":"publish","type":"page","link":"https:\/\/cyber-curriculum.com\/en\/it-security-compliance\/bsi-it-basic-protection\/","title":{"rendered":"BSI IT-Grundschutz"},"content":{"rendered":"

<\/span>BSI IT-Consultation<\/span><\/p>\n<\/div>

Your contacts for BSI basic protection advice<\/span><\/h1><\/div>

Your contacts for BSI basic protection advice<\/span><\/h3><\/div>

YOUR CONTACT FOR BSI BASIC PROTECTION ADVICE<\/h4><\/div>

You can rely on established standards developed by the German Federal Office for Information Security (BSI) to secure your company’s IT. This BSI IT baseline protection analyzes the potential for hazards and damage and defines appropriate protection levels and security measures. You can prove your basic IT protection with a certification.<\/p>\n<\/div><\/div><\/div>

<\/span><\/div><\/div><\/div><\/div><\/div>

BSI basic protection consulting<\/p>\n<\/div>

Security conception, audit & implementation (KRITIS & public sector)<\/h4><\/div>

You can rely on established standards developed by the German Federal Office for Information Security (BSI) to secure your company’s IT. BSI IT-Grundschutz analyzes the potential for threats and damage and defines appropriate protection levels and security measures. You can prove your basic IT protection with a certification.<\/p>\n<\/div>

<\/div>

<\/i><\/i><\/span>BSI IT baseline protection - what is it?<\/span><\/a><\/h4><\/div>
\n

The German Federal Office for Information Security (BSI) has developed an IT baseline protection catalog for companies, authorities and other stakeholders active in the field of critical data security to enable the gradual establishment and continuous maintenance of a comprehensive information security management system (ISMS).<\/p>\n

The primary objective is to safeguard information technology. The first step is to identify and evaluate security risks. An action implementation plan consolidates the required safety measures, after which they are finally implemented. All areas of the company with a high or very high need for IT protection must be checked for compliance with the ISMS on a regular and ad hoc basis. ISO 27001 certification also serves this purpose.<\/p>\n<\/div><\/div><\/div><\/div><\/div>

<\/i><\/i><\/span>BSI IT baseline protection audit for KRITIS and the public sector<\/span><\/a><\/h4><\/div>
\n

Since 2017, the German government has been revising the law to increase the security of information technology systems. The so-called IT Security Act (IT-SiG) 2.0 focuses in particular on data security in the federal administration, in critical infrastructure companies (KRITIS) and organizations of special public interest (UBI) – these include companies of great economic importance as well as arms manufacturers and producers and processors of hazardous substances.<\/p>\n

Companies in these sectors will gradually be obliged to register with the BSI and submit a declaration on their IT security. This includes certifications, safety audits and safety measures.<\/p>\n

The IT-SiG 2.0 significantly expands both the obligations for data protection-critical companies and the control powers of the state. The revision, including the lowering of various KRITIS thresholds, led to a significant evaluation of the group of affected operators. The sharp increase in the amount of fines for non-compliance with specifications and requirements to up to EUR 2 million (EUR 20 million for legal entities) is also a reminder to implement cyber security stringently in the company now at the latest.<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div>

8 KRITIS sectors for BSI IT baseline protection audits<\/h4><\/div>