22-Feb-2022

German Federal Office for Information Security (BSI) publishes IT-Grundschutz-Compendium 2022

The IT-Grundschutz-Compendium provides companies, public authorities and critical infrastructure facilities with a detailed guide on how to protect themselves.

With the new edition of the IT-Grundschutz-Compendium, the German Federal Office for Information Security (BSI) once again provides companies, public authorities and critical infrastructure facilities with a detailed guide on how to protect themselves effectively against attacks on their IT systems. In addition to technical and personnel recommendations, the compendium provides users with relevant information on securing the organization and infrastructure. In the new, revised edition, additional attention is paid to the security of building automation and remote maintenance in industrial environments.

The IT-Grundschutz methodology uses a modular principle that is divided into ten layers and deals with information security issues - from applications (APP) to industrial IT (IND) and security management (ISMS).

Edition 2022 of the IT-Grundschutz-Compendium contains a total of 104 basic IT protection modules. Since the compendium is always adapted to the current state of the art, it also includes 7 new basic IT protection modules in addition to the 97 modules from Edition 2021. These include OPS.1.1.7 System Management and SYS.1.6 Containerization. The new IND.3.2 Remote maintenance in the industrial environment module focuses more strongly on Industry 4.0. Of the existing modules, 16 have been revised for the 2022 edition to provide institutions with an even more comprehensive basis for area-wide protection.

Rohde & Schwarz Cybersecurity bases its solutions for successful and secure digitalization with simultaneous digital sovereignty on the basic IT protection recommended by the BSI. While cyberattacks are complex and opaque, the same should not apply for cybersecurity. In line with the modules of the IT-Grundschutz-Compendium, Rohde & Schwarz Cybersecurity guides companies and public authorities securely through the challenges of the networked world with proactive solutions.

We would be happy to help you find the appropriate Rohde & Schwarz Cybersecurity solutions based on the IT-Grundschutz-Compendium Edition 2022 and thus guarantee the best possible protection for your sensitive data.

Press & media contact

Rohde & Schwarz

Rohde & Schwarz is striving for a safer and connected world with its Test & Measurement, Technology Systems and Networks & Cybersecurity Divisions. For over 90 years, the global technology group has pushed technical boundaries with developments in cutting-edge technologies. The company's leading-edge products and solutions empower industrial, regulatory and government customers to attain technological and digital sovereignty. The privately owned, Munich based company can act independently, long-term and sustainably. Rohde & Schwarz generated net revenue of EUR 2.93 billion in the 2023/2024 fiscal year (July to June). On June 30, 2024, Rohde & Schwarz had more than 14,400 employees worldwide.

R&S® is a registered trademark of Rohde & Schwarz GmbH & Co. KG.

Networks & Cybersecurity

With its subsidiaries LANCOM Systems, Rohde & Schwarz Cybersecurity, and Rohde & Schwarz SIT, the group has bundled its expertise in one division. Know-how that is needed to become the largest provider of network and cybersecurity technology for companies, public authorities, and organizations in Europe.