What are the three parts of the IKT Minimalstandard?

1) Grundlagen (foundations), 2) the Framework with 106 concrete measures, 3) a Self-Assessment with an Excel-based evaluation tool.

* The three parts map to learn → do → measure. *

1. Grundlagen — a reference section conveying background knowledge on ICT security: risk management, defence-in-depth, security architecture, ICS/industrial control systems, supply-chain and personnel security
2. The Framework — the operational core: 106 concrete measures, organized by the five NIST-style functions (Identifizieren, Schützen, Detektieren, Reagieren, Wiederherstellen)
3. Self-Assessment — an Excel Bewertungstool with which organizations score their implementation of each measure themselves — or have it audited by an external firm; results can feed an organization-spanning benchmarking (compare your maturity against sector peers)

Tip: The three parts map to learn → do → measure. The Excel tool is what makes the standard practical for SMEs: no expensive GRC software needed to run a structured maturity assessment.