BSI Grundschutz · Graham Miranda Network

BSI-IT-Grundschutz-Vorbereitung

Practical BSI IT-Grundschutz preparation for SMEs that need to demonstrate a recognized German security baseline — for public-sector contracts, larger customer due diligence, or general defensibility. We do the scoping, mapping and documentation work, not the formal certification itself.

Service öffnen ↗Kontakt aufnehmen

BSI Grundschutz · BSI IT Grundschutz · Mittelstand BSI · security baseline Germany

BSI-IT-Grundschutz-Vorbereitung Graham Miranda service overview

Überblick

Was diese Seite abdeckt

Praktische BSI-IT-Grundschutz-Vorbereitung für KMU, die einen anerkannten deutschen Sicherheitsbaseline nachweisen müssen — Scoping, Mapping und Dokumentationsarbeit.

Scoping: which information domain, which Grundschutz profile (Basis/Standard)
Mapping current state against BSI Grundschutz building blocks
Gap analysis with prioritised remediation plan
Documentation work: security guideline, risk analysis, evidence pack
Preparation for formal audit if certification is the goal

So arbeiten wir

Ein transparentes Engagement-Modell mit klaren Meilensteinen.

Scoping workshop

Decide which Grundschutz profile (Basis or Standard), which information domain is in scope, which building blocks apply.

Map & analyse

Map current technical, organisational and procedural controls against Grundschutz building blocks. Written gap report with prioritised remediation.

Lift & document

Implement missing controls over 6–12 months; produce the documentation needed for self-assessment or external audit.

Ergebnisse, die Sie erwarten können

Praktische, ehrliche Erwartungen — keine übertriebenen Versprechen.

Recognized baseline

A defensible posture against a German national standard.

Audit-ready documentation

Evidence pack structured for review.

Right-sized

Basis profile for SMEs; Standard for higher maturity.

Stays useful

The work produces operational hygiene, not paperwork.

Network depth

Häufige Fragen

Kurze Antworten für Besucher, die Graham-Miranda-Servicebereiche vergleichen.

Do you certify us against Grundschutz?

No — formal certification requires an accredited auditor. We do the preparation work; we coordinate with auditors when certification is the goal.

Is Basis enough for our needs?

For most SMEs that need to demonstrate a serious baseline for public-sector tenders or larger-customer due diligence, Basis is typically appropriate. Standard for higher requirements.

How does this relate to ISO 27001?

Grundschutz building blocks largely map to ISO 27001 controls. Some SMEs prepare both. We coordinate scope to avoid duplication.

What about Grundschutz-Kompendium 2023 updates?

We work to the current edition. Updates to building blocks tracked as part of the engagement.

How long does preparation take?

Basis: typically 6–9 months for SMEs starting from a baseline. Standard: 9–18 months.

Can you provide ongoing audit support?

Yes — annual review and maintenance is a common follow-on engagement.

Nächster Schritt