Quiz Entry - updated: 2026.07.14
What are the process and system building block layers in the BSI IT-Grundschutz-Kompendium?
Process building blocks cover organizational aspects (ISMS, ORP, CON, OPS, DER), while system building blocks cover technical components (IND, APP, SYS, NET, INF).
* The Schichtenmodell — process (organizational) blocks above, system (technical) blocks below. *
Process Building Blocks:
| Abbreviation | Full Name | Focus |
|---|---|---|
| ISMS | Sicherheitsmanagement | Security management |
| ORP | Organisation & Personal | Organization & personnel |
| CON | Konzepte & Vorgehensweise | Concepts & methodology |
| OPS | Betrieb | Operations |
| DER | Detektion & Reaktion | Detection & response |
System Building Blocks:
| Abbreviation | Full Name | Focus |
|---|---|---|
| IND | Industrielle IT | Industrial IT / ICS |
| APP | Anwendungen | Applications |
| SYS | IT-Systeme | IT systems |
| NET | Netze & Kommunikation | Networks & communication |
| INF | Infrastruktur | Infrastructure |
How to use them: When securing an asset, you select relevant building blocks from both layers. For example, a web server would involve OPS (operations), DER (monitoring), APP (web application), SYS (server OS), NET (network), and INF (server room).
Go deeper:
IT-Grundschutz (de.wikipedia.org) — Erklärt die zehn Schichten/Bausteine (Prozess- vs. System-Bausteine).