With BSI-Standard 200-2 the BSI provides methodology for effective management of information security. This can be adapted to the requirements of organisations of various types and sizes. In BSI-Standard 200-2 this is implemented via the three methodologies “Standard Protection”, “Basic Protection” and “Core Protection”.