IT-Grundschutz was created by the German Federal Office for Information Security, and serves as a methodology for organizations to assess and enact proper computer security measures.

The aim of IT-Grundschutz is to achieve an appropriate security level for all types of information within an organization. IT-Grundschutz uses a holistic approach to this process and provides guidance for the application of technical, organizational, personnel and infrastructural safeguards.