verinice.cloud ISO+GS Bundle - EVAL

Test free for 60 days: verinice ISO+GS Bundle

Test the verinice ISO+GS Bundle for 60 days free of charge and without obligation – with full access to all functions of the single-user version.

The verinice ISO+GS Bundle combines the contents of the verinice ISO 27001 Bundle with those of the verinice Grundschutz Bundle. It provides a comprehensive information security management system (ISMS) for ISO 27001 and BSI IT-Grundschutz and also includes the domains NIS-2 and GDPR.

Your benefits during the evaluation period:

• 60-day free evaluation
• Full functionality in the single-user version
• No automatic renewal
• No cancellation required
• Option to keep your data when purchasing the full product

The ISO Standard 22301 and BSI Standard 200-4 for Business Continuity Management (BCM) are expected to be provided end of July 2026.

After the evaluation period

• If you decide to continue using the tool, you can convert it into a paid subscription at any time within the 60 days. To do so, simply purchase the full product and keep your data from the evaluation.
• If you decide against continuing to use the tool, you do not need to do anything: after 60 days, we will deactivate your account on this portal and, after another 30 days, we will delete all data in the application automatically.

You do not need to cancel this EVAL version or request the deletion of your data – we will do this automatically for you.

Please note our Terms and Conditions and the provisions for free services.

Scope of the verinice ISMS Bundle

The verinice.Cloud ISO+GS Bundle includes the following domains for setting up, operating and maintaining an information security management system (ISMS):

• the ISO 27001 domain
• the ISO 22301 domain
• the BSI IT-Grundschutz domain
• the BSI Standard 200-4 domain
• the NIS-2 domain
• the GDPR domain

This product takes the german standards DIN EN ISO/IEC 27001, 27002, 27005 and 22301, BSI Standards 200-1, 200-2, 200-3 and 200-4 as well as the english standards ISO/IEC 27001, 27002, 27005 and 22301 into account. 

This version with regard to the ISO standards, does not yet contain any copyright-protected content. A risk profile with copyright-protected control texts is expected to be provided at an additional cost by the end of 2026.

Included in this product:

• 2 units for productive use and testing
• 1 main account

Additional units can be subscribed to separately. The same applies to additional users, who can be subscribed to in addition to the 1 main account included here.

Native Implementation of ISO 27001

A comprehensive profile with content from the ISO/IEC standards provides a detailed introduction to the design and possible uses of the ISMS tool. The risk profile according to DIN EN ISO/IEC 27001 provides you with a complete organization including sample objects for mapping an ISMS according to DIN EN ISO/IEC 27001, including a prepared risk assessment. Scenarios based on threats and vulnerabilities from ISO/IEC 27005:2022 are linked to relevant sample assets, and the management requirements as well as the Annex A requirements of DIN EN ISO/IEC 27001:2024 for risk treatment are taken into account.

Important functional components of the ISMS include:

• Definition of the scope
• Inventory of assets
• Statement of Applicability (SoA)
• Determination of the business impact
• Risk management in accordance with ISO/IEC 27005
• Reports on the inventory of assets, the Statement of Applicability (SoA), and risk management

This enables the implementation, maintenance, and certification of an ISMS in accordance with DIN EN ISO/IEC 27001.

Implementation of BSI IT-Grundschutz

A comprehensive demo profile provides a detailed introduction to the concept and possible uses of the Grundschutz tool.

Important functional components of the ISMS include:

• Definition of the scope
• Structural analysis
• Determination of protection requirements
• IT-Grundschutz Compendium Edition 2023
• Building block modeling
• IT-Grundschutz check
• Maintenance and continuous improvement
• Risk analysis according to BSI IT-Grundschutz 200-3
• Reference documents A.1 to A.6

This enables ISO 27001 certification on the basis of IT-Grundschutz (standard or core protection) or a BSI attestation (basic protection).