What is the Basis-Sicherheitscheck and what does it produce?

A target/actual comparison between the requirements of the Grundschutz model and the measures already implemented — its output is the list of missing security measures.

The Basis-Sicherheitscheck (basic security check) answers two questions:

• Are my information assets sufficiently protected?
• What remains to be done?

Mechanics:

• Soll (target): the recommended requirements/measures from the blocks assigned during modeling (the IT-Grundschutz model)
• Ist (actual): the measures already implemented in the real information domain
• Soll-Ist-Vergleich: compare both — the delta is the set of fehlende Sicherheitsmaßnahmen (missing security measures), the direct input for the realization planning

It's deliberately interview-based (not a penetration test): you determine implementation status by talking to the responsible people, then verify with spot checks.

Tip: Think of it as a gap analysis against your own tailored checklist — the model defines "done", the check finds what isn't.