What changed between the old BSI 100-x series and the new BSI 200-x series?

Question

Accepted Answer

The BSI 200-x series modernized the structure: 200-1 expanded from 4 to 6 phases, and 200-2 reorganized from 5 technical layers to process-oriented and system-oriented building block layers.
BSI 100-1 vs 200-1 (ISMS):

BSI 100-1 (old)
BSI 200-1 (new)

1. Initiate security process
1. Initiate security process

2. Create security concept
2. Create InfoSec guideline

3. Implement security concept
3. Organize security process

4. Maintain and improve
4. Create security concept

5. Implement security concept

6. Maintain and improve

BSI 100-2 vs 200-2 (Methodology):

BSI 100-2 (old)
BSI 200-2 (new)

Layer 1: Overarching aspects
Process-oriented: ISMS, ORP, CON, OPS, DER

Layer 2: Infrastructure
System-oriented: INF, NET, SYS, APP, IND

Layer 3: IT systems

Layer 4: Networks

Layer 5: Applications

Key improvement: The 200-x series is better aligned with current ISO standards and provides a more modular, process-oriented approach rather than the old rigid layer model.

BSI 100-1 (old)	BSI 200-1 (new)
1. Initiate security process	1. Initiate security process
2. Create security concept	2. Create InfoSec guideline
3. Implement security concept	3. Organize security process
4. Maintain and improve	4. Create security concept
	5. Implement security concept
	6. Maintain and improve

BSI 100-2 (old)	BSI 200-2 (new)
Layer 1: Overarching aspects	Process-oriented: ISMS, ORP, CON, OPS, DER
Layer 2: Infrastructure	System-oriented: INF, NET, SYS, APP, IND
Layer 3: IT systems
Layer 4: Networks
Layer 5: Applications