How does the IKT Minimalstandard relate to the NIST Cybersecurity Framework?

The IKT Minimalstandard is essentially a Swiss adaptation of the NIST CSF: same five-function structure, concretized into 106 measures with a built-in self-assessment.

* The IKT-Minimalstandard inherits the five CSF functions almost 1:1, in German. *

What it inherits from NIST CSF:

• The five functions (translated: Identifizieren, Schützen, Detektieren, Reagieren, Wiederherstellen)
• The category/subcategory structure of the Core (the measures map closely to CSF subcategories — the CSF has ~108 subcategories, the Minimalstandard 106 measures)
• The tier-based maturity thinking (Partiell → Dynamisch)

What it adds:

• German-language, Switzerland-specific framing for supply security and critical infrastructure
• A ready-made Excel self-assessment tool with scoring scheme and benchmarking
• A Grundlagen section as background reading (incl. ICS/OT security — relevant for utilities)

Why this matters: if you know one, you nearly know the other. International firms can satisfy a Swiss regulator with the Minimalstandard while keeping their global NIST-CSF program — the mapping is almost 1:1.

Go deeper:

• IKT-Minimalstandard 2023 & Bewertungstool (BACS/NCSC) — Zeigt die fünf NIST-Funktionen, die ~108 Massnahmen und das Excel-Self-Assessment.