GSTool

Tool Identity Card

General information
Basic information to identify the product

Tool name : GSTOOL
Vendor name : Federal Office for Information Security (BSI) Germany
Country of origin : Germany

Level of reference of the tool
Details about the coverage or the « originators » of the solution

Coverage : Local
Supported by organization, club,... (e.g. as sponsor) : N/A

Brief description of the product
Give a brief description of the product containing general information, overview of functions…

• GStool has been developed by Federal Office for Information Security (BSI) in order to support users of the IT Baseline Protection Manual. After collecting the information required, the users have a comprehensive reporting system at their disposal for carrying out structure analyses on all of their compiled data and for generating reports on paper or in electronic form. GSTOOL is a stand-alone application with database support. A trial version is available.

Supported functionality
Specify the functionality this tool provides.

R.A. Method phases supported

• Risk identification : Assessment of Protection Requirements
• Risk analysis : Assessment of Protection Requirements
• Risk evaluation : Assessment of Protection Requirements

Other phases

• N/A

R.M. Method phases supported

• Risk assessment
• Risk treatment : Baseline Protection Modeling, Basic Security Check, Supplementary Security Analysis
• Risk acceptance : Estimation of cost and effort, residual risk
• Risk communication : Reports Module

Other phases

• N/A

Other functionality

• IT Baseline Protection Certificate : Show qualification level that has been achieved

Information processed

• N/A

Lifecycle
Date of the first edition, date and number of actual version

Date of first release : 1998
Date and identification of the last version : 2004 - version 3.1

Useful links
Link for further information

Official web site : http://www.bsi.bund.de/english/gstool
user group web site : N/A
Relevant web site : http://www.bsi.bund.de/gstool

Languages
List the available languages that the tool supports

Languages available : English, German

Pricing and licensing models
Specify the price for the product (as provided by the company on December 2005)

• 1 license: 887,40 €
• 2 license: 1774,80 €
• 3 licenses: 2.528,80 €
• 4-5 licenses: 3.990,40 €
• 6-10 licenses: 7.424,00 €
• 11-20 licenses: 13.572,00 €
• 21-40 licenses: 23.200,00 €
• More than 40 licenses: on request

Sectors with free availability or discounted price : German universities receive a 50% discount

Trial before purchase
Details regarding the evaluation period of the tool

CD or download available : Evaluation version
Identification required : No
Trial period : 30

Tool architecture
Specify the technologies used in this tool

• Stand alone application
• Database : Microsoft MSDE, Microsoft SQL-Server

Page top

Scope

Target public
Defines the most appropriate type of communities for this tool

• Government, agencies
• Large scale companies
• SME
• Commercial CIEs
• Non commercial CIEs

Specific sector : N/A

Spread
Information concerning the spread of this tool

General information : N/A
Used inside EU countries : N/A
Used outside EU countries : N/A

Level of detail
Specify the target kind of people for this tool based on its functionality

Management : N/A
Operational : N/A
Technical : N/A

Compliance to IT Standards
List the national or international standard this tool is compliant with

• IT Baseline Protection Manual

Tool helps towards a certification
Specify whether the tool helps the company toward a certification according to a standard

• IT Baseline Protection Certificate

Training
Information about possible training courses for this tool

Course : N/A

Page top

Users viewpoint

Skills needed
Specify the skills needed to use and maintain the solution

• To install : Install wizard, single installation
• To use : Detailed user manual
• To maintain : -

Tool Support
Specify the kind of support the company provides for this product

Support : N/A

Organization processes integration
Describe user roles this tool supports

Supported Roles

• N/A

Intergration in Organization activities

• N/A

Interoperability with other tools
Specify available interfaces or other ways of integration with other tools

• N/A

Sector adapted knowledge databases supported
Name and describe the sector adapted databases that this tool provides

• N/A

Flexibility of tool's database
Can the database be customized and adapted to client requirements?

• Modules/Threats/Safeguards : Edit, delete, add new