BSI IT Grundschutz and ISO 27001 are similar in approach. Both standards can be used to determine IT risks and reduce them to an acceptable level using suitable measures. ISO 27001 is more focused on managing information security, whereas the BSI basic protection catalogs describe detailed procedures for minimizing risks.