Skip to content

Roadmap ​

As of October 16, 2026

Subject to change! This roadmap is updated every three weeks and is subject to a certain degree of uncertainty.

Q4 2026 ​

VNA Import Development ​

The import of VNA files has been expanded to include import into the following domains:

  • Data Protection (from the ISO perspective)
  • Business Continuity (BCM) (from the perspectives of IT-Grundschutz and ISO)

For a detailed description of the features, see the documentation for the VNA Importer.

IT-Grundschutz Profiles Development ​

Provision of the IT-Grundschutz Profiles based on the IT-Grundschutz Compendium in the 2023-1 Edition:

  • IT-GS Profil für die Verkehrssteuerungs- und Leitsysteme der Bundesautobahn
  • IT-GS-Profil Profil für oberste Bundesbehoerden
  • IT-GS-Profil Profil für den Betrieb von UAS
  • IT-GS-Profil Profil für Bundesgerichte
  • IT-GS-Profil Profil für Ressort-Forschungseinrichtungen
  • IT-GS-Profil zur Absicherung von 5G-Campusnetzen
  • IT-GS-Profil für Leitstellen V 2.0 Edition 2023
  • IT-GS-Profil für die Nutzung der E-Akte Bund
  • IT-GS-Profil für Hochschulen

The IT-GS Profile Basis-Absicherung Kommunalverwaltung Version 4, is already available for use in verinice.

IT-GS profiles based on an older edition of the IT-Grundschutz Compendium may be provided upon request.

B3S Medical Care Development ​

Provision of the Industry-Specific Security Standard (B3S) for Medical Care in Version 1.3.1 as a profile for verinice.

Workflow Development ​

In the first iteration, tasks related to the implementation of control objects and their revision are mapped as a workflow. A new page, Tasks displays all controls to be implemented or controls to be revise, filterable by responsibility. The basis for the new Workflow functionality is the newly introduced assignment of accounts to person objects.

Report Formats Planning ​

Provision of additional output formats for reports (CSV, XLSX/ODS, and DOCX/ODT, HTML):

  • Output of reports in the DOCX and ODT formats for editorial editing before they are finalized.
  • Creation of additional report templates in tabular form in the CSV/XLSX/ODS formats for quantitative further processing, filtering, and sorting of data.
  • Export of all report templates in HTML format for internal distribution (e.g., on the intranet) or for quick browser-based viewing without additional software.

Access Management - Scopes Planning ​

User groups can be granted read and write permissions for scope objects, ensuring that content in other scopes cannot be accessed. This feature enables granular access permissions for, e.g., information domains, scopes, or external service providers.

Grundschutz++ Domain Planning ​

Deployment of an initial functional Grundschutz++ (DE) domain with updates to methodology and risk management.

Dashboard Planning ​

Expanded dashboard functions to visually present data. The expansion of the dashboard is planned in several iterations:

  • Graphical representation of the implementation status of controls and risks.
  • Calendar view of tasks and due dates.
  • Display of key metrics in tiles.
  • Option to export the displayed data.

Audit Management Planning ​

Mapping of internal and external audits in verinice with task delegation and monitoring as part of the workflow. The planning and execution of internal and external audits will be mapped via a new scope object.

Q1 2027 ​

Access Management - Objects Planning ​

Users groups can be granted read and write permissions for any desired objects, ensuring that other objects and their content cannot be accessed. This feature enables granular access permissions for individual objects and object groups, such as business processes, applications, or IT systems.