BSI Publishes Timeline for Grundschutz++ Certification Starting January 2027 (bsi.bund.de)

• Pilot phase: April 1 – September 30, 2026
• Methodology presentation at it-sa 2026 on October 27, 2026
• ISO 27001 certification start on January 1, 2027
• New training concept for GS++ practitioners and auditors from October 31, 2026
• Machine-readable requirements enable automated security processes

"The German Federal Office for Information Security (BSI) has published the milestone plan for the new Grundschutz++ (GS++) standard. Certification according to ISO 27001 based on GS++ will be possible from January 1, 2027. The standard is process-oriented and uses machine-readable requirements. A pilot phase begins April 1, 2026."