Published under Risk Management

Tool Identity Card

General information
Basic information to identify the product

Tool name : GSTOOL
Vendor name : Federal Office for Information Security (BSI) Germany
Country of origin : Germany

Level of reference of the tool
Details about the coverage or the « originators » of the solution

Coverage : Local
Supported by organization, club,... (e.g. as sponsor) : N/A

Brief description of the product
Give a brief description of the product containing general information, overview of functions…

  • GStool has been developed by Federal Office for Information Security (BSI) in order to support users of the IT Baseline Protection Manual. After collecting the information required, the users have a comprehensive reporting system at their disposal for carrying out structure analyses on all of their compiled data and for generating reports on paper or in electronic form. GSTOOL is a stand-alone application with database support. A trial version is available.

Supported functionality
Specify the functionality this tool provides.

R.A. Method phases supported

  • Risk identification : Assessment of Protection Requirements
  • Risk analysis : Assessment of Protection Requirements
  • Risk evaluation : Assessment of Protection Requirements

Other phases

  • N/A

R.M. Method phases supported

  • Risk assessment
  • Risk treatment : Baseline Protection Modeling, Basic Security Check, Supplementary Security Analysis
  • Risk acceptance : Estimation of cost and effort, residual risk
  • Risk communication : Reports Module

Other phases

  • N/A

Other functionality

  • IT Baseline Protection Certificate : Show qualification level that has been achieved

Information processed

  • N/A

Date of the first edition, date and number of actual version

Date of first release : 1998
Date and identification of the last version : 2004 - version 3.1

Useful links
Link for further information

Official web site :
user group web site : N/A
Relevant web site :

List the available languages that the tool supports

Languages available : English, German

Pricing and licensing models
Specify the price for the product (as provided by the company on December 2005)

  • 1 license: 887,40 €
  • 2 license: 1774,80 €
  • 3 licenses: 2.528,80 €
  • 4-5 licenses: 3.990,40 €
  • 6-10 licenses: 7.424,00 €
  • 11-20 licenses: 13.572,00 €
  • 21-40 licenses: 23.200,00 €
  • More than 40 licenses: on request

Sectors with free availability or discounted price : German universities receive a 50% discount

Trial before purchase
Details regarding the evaluation period of the tool

CD or download available : Evaluation version
Identification required : No
Trial period : 30

Tool architecture
Specify the technologies used in this tool

  • Stand alone application
  • Database : Microsoft MSDE, Microsoft SQL-Server

Page top


Target public
Defines the most appropriate type of communities for this tool

  • Government, agencies
  • Large scale companies
  • SME
  • Commercial CIEs
  • Non commercial CIEs

Specific sector : N/A

Information concerning the spread of this tool

General information : N/A
Used inside EU countries : N/A
Used outside EU countries : N/A

Level of detail
Specify the target kind of people for this tool based on its functionality

Management : N/A
Operational : N/A
Technical : N/A

Compliance to IT Standards
List the national or international standard this tool is compliant with

Tool helps towards a certification
Specify whether the tool helps the company toward a certification according to a standard

Information about possible training courses for this tool

Course : N/A

Page top

Users viewpoint

Skills needed
Specify the skills needed to use and maintain the solution

  • To install : Install wizard, single installation
  • To use : Detailed user manual
  • To maintain : -

Tool Support
Specify the kind of support the company provides for this product

Support : N/A

Organization processes integration
Describe user roles this tool supports

Supported Roles

  • N/A

Intergration in Organization activities

  • N/A

Interoperability with other tools
Specify available interfaces or other ways of integration with other tools

  • N/A

Sector adapted knowledge databases supported
Name and describe the sector adapted databases that this tool provides

  • N/A

Flexibility of tool's database
Can the database be customized and adapted to client requirements?

  • Modules/Threats/Safeguards : Edit, delete, add new

We use cookies to ensure we give you the best browsing experience on our website. Find out more on how we use cookies and how you can change your settings.

Ok, I understand No, tell me more