From Strukturanalyse to Realisierungsplanung, modelled as a knowledge graph, not stitched together in documents. Source-linked and human-approved. Grundschutz++ ready.
Stop recycling last project's text. The knowledge graph generates tailored Sicherheitskonzepte from each client's actual documentation. Fewer days per audit, more projects per year.
For Companies · Team EditionBring the work in-house without the headcount. OrbisGraph turns your ISMS team's existing documentation into a living Sicherheitskonzept, kept current between audits, owned by the people who actually run your systems.
02 / The challenge
Three bottlenecks show up in every ISMS team, every Grundschutz consultancy, and every regulated DACH company preparing for NIS2.
01 · The workload
BSI IT-Grundschutz carries more than 1,000 requirements across 100+ Bausteine. NIS2 layers on sector-specific duties, DORA on financial firms, KRITIS on operators. The work scales linearly. Your headcount doesn't.
02 · The quality gap
The market rewards throughput, so practices optimise for recycling old text. It works until an auditor notices. A Sicherheitskonzept that doesn't reflect your actual organisation is an audit-Rauchvorhang, not a security posture.
03 · The scale
NIS2, KRITIS-Dachgesetz, the BSI's Grundschutz++ reform. Each shifts scope, wording, and evidence requirements. OrbisGraph maps the changes as they happen and evolves your Sicherheitskonzepte alongside the industry.
03 / The platform
OrbisGraph isn't a ticket tracker or a Word template. It's a knowledge graph that connects your assets, processes, Bausteine, requirements, measures, evidence, and people, with every relationship versioned and explainable.
The mapping
OrbisGraph extracts your ISMS into the knowledge graph from your documentation. Every output measures its own accuracy, and extraction quality is independently validated by cybersecurity researchers at Freie Universität Berlin.
04 / Credibility
Sovereign German hosting. Your data stays in Germany, on Deutsche Telekom Cloud.
Platform detailsExtraction quality is independently validated by cybersecurity researchers at Freie Universität Berlin.
Platform detailsFounded by cryptography, AI, and cybersecurity researchers. German GmbH, headquartered in Berlin.
Meet the team05 / Future-proof
Grundschutz++ replaces document-centric compliance with machine-readable, structured data. OrbisGraph is built for exactly this direction. Sicherheitskonzepte written today convert when the new format ships. Migration, not restart. The same graph-native structure makes ISO 27001 a serialisation exercise, not a rebuild.
Full Grundschutz++ briefing06 / From the field
“This is the first time I see somebody turning this honestly big piece of gold that's just so overwhelming that nobody can practically use it into something that actually does make sense.”MD · Cybersecurity ConsultancyFortune-500 Clients
“A major unlock, freeing up capacity for the things people actually enjoy and where they're adding real value, versus just feeding some compliance machine.”MD · Cybersecurity ConsultancyDACH Enterprise Clients
“Using the graph for establishing the ground truth, getting out of the tacit knowledge trap, and then scaling it. Once you have this, you can really increase speed. And you keep it consistent.”Defence IT Provider7,000+ Employees
“If you're able to do that at that quality level, the extractions, and being able to say this is not just what you have but the preparation of what's missing, that has massive value.”CEO · DACH Cybersecurity Consultancy100+ Employees
Schedule a call to explore how OrbisGraph can accelerate your compliance efforts.