Published under Risk Management

Tool Identity Card

General information
Basic information to identify the product

Tool name : GSTOOL
Vendor name : Federal Office for Information Security (BSI) Germany
Country of origin : Germany

Level of reference of the tool
Details about the coverage or the « originators » of the solution

Coverage : Local
Supported by organization, club,... (e.g. as sponsor) : N/A

Brief description of the product
Give a brief description of the product containing general information, overview of functions…

  • GStool has been developed by Federal Office for Information Security (BSI) in order to support users of the IT Baseline Protection Manual. After collecting the information required, the users have a comprehensive reporting system at their disposal for carrying out structure analyses on all of their compiled data and for generating reports on paper or in electronic form. GSTOOL is a stand-alone application with database support. A trial version is available.

Supported functionality
Specify the functionality this tool provides.

R.A. Method phases supported

  • Risk identification : Assessment of Protection Requirements
  • Risk analysis : Assessment of Protection Requirements
  • Risk evaluation : Assessment of Protection Requirements

Other phases

  • N/A

R.M. Method phases supported

  • Risk assessment
  • Risk treatment : Baseline Protection Modeling, Basic Security Check, Supplementary Security Analysis
  • Risk acceptance : Estimation of cost and effort, residual risk
  • Risk communication : Reports Module

Other phases

  • N/A

Other functionality

  • IT Baseline Protection Certificate : Show qualification level that has been achieved

Information processed

  • N/A

Date of the first edition, date and number of actual version

Date of first release : 1998
Date and identification of the last version : 2004 - version 3.1

Useful links
Link for further information

Official web site :
user group web site : N/A
Relevant web site :

List the available languages that the tool supports

Languages available : English, German

Pricing and licensing models
Specify the price for the product (as provided by the company on December 2005)

  • 1 license: 887,40 €
  • 2 license: 1774,80 €
  • 3 licenses: 2.528,80 €
  • 4-5 licenses: 3.990,40 €
  • 6-10 licenses: 7.424,00 €
  • 11-20 licenses: 13.572,00 €
  • 21-40 licenses: 23.200,00 €
  • More than 40 licenses: on request

Sectors with free availability or discounted price : German universities receive a 50% discount

Trial before purchase
Details regarding the evaluation period of the tool

CD or download available : Evaluation version
Identification required : No
Trial period : 30

Tool architecture
Specify the technologies used in this tool

  • Stand alone application
  • Database : Microsoft MSDE, Microsoft SQL-Server

Page top


Target public
Defines the most appropriate type of communities for this tool

  • Government, agencies
  • Large scale companies
  • SME
  • Commercial CIEs
  • Non commercial CIEs

Specific sector : N/A

Information concerning the spread of this tool

General information : N/A
Used inside EU countries : N/A
Used outside EU countries : N/A

Level of detail
Specify the target kind of people for this tool based on its functionality

Management : N/A
Operational : N/A
Technical : N/A

Compliance to IT Standards
List the national or international standard this tool is compliant with

Tool helps towards a certification
Specify whether the tool helps the company toward a certification according to a standard

Information about possible training courses for this tool

Course : N/A

Page top

Users viewpoint

Skills needed
Specify the skills needed to use and maintain the solution

  • To install : Install wizard, single installation
  • To use : Detailed user manual
  • To maintain : -

Tool Support
Specify the kind of support the company provides for this product

Support : N/A

Organization processes integration
Describe user roles this tool supports

Supported Roles

  • N/A

Intergration in Organization activities

  • N/A

Interoperability with other tools
Specify available interfaces or other ways of integration with other tools

  • N/A

Sector adapted knowledge databases supported
Name and describe the sector adapted databases that this tool provides

  • N/A

Flexibility of tool's database
Can the database be customized and adapted to client requirements?

  • Modules/Threats/Safeguards : Edit, delete, add new
Browse the Topics

This site uses cookies to offer you a better browsing experience.
Aside from essential cookies we also use tracking cookies for analytics.
Find out more on how we use cookies.

Accept all cookies Accept only essential cookies