IKT-Minimalstandard Audit

The Swiss ICT minimum standard describes 108 measures for the cyber resilience of an organisation. This app walks you through all of them — and tells you, for every single measure, how to actually implement it.

WHAT THE ICT MINIMUM STANDARD IS
Published by the Swiss Federal Office for National Economic Supply together with the Federal Office for Cyber Security, 2023 edition. It addresses operators of critical infrastructure and is recommended to every Swiss company beyond that. Built on the NIST Cybersecurity Framework: five functions — Identify, Protect, Detect, Respond, Recover — 23 categories, 108 measures, of which 22 are high, 48 medium and 38 low priority. Every measure references CIS Controls, COBIT, ISO 27001:2022 and NIST SP 800-53.

WHY COMPANIES WORK WITH IT
• Because clients, cantons and cyber insurers ask about the state of implementation, and a documented self-assessment is the answer
• Because operators of critical infrastructure pass the standard down their supply chain
• Because the official Excel workbook stays on the laptop while the stocktaking happens where the equipment is
• Because 108 measures without an order are overwhelming — quick-start mode shows the 22 most important first

SELF-ASSESSMENT LIKE THE EXCEL TOOL
• Maturity levels 0–4 plus "not applicable"
• Scores per category, per function and overall — calculated like the official workbook
• Target value 2.6, adjustable in the settings
• Radar profile and gap analysis
• Export back into the official workbook — ratings and comments in the right cells

PRACTICAL GUIDANCE FOR EVERY MEASURE
The official text says WHAT is expected. You also get:
• One sentence for the management: why it matters
• Three to five concrete implementation steps
• The mistakes people actually make
• What counts as evidence in an audit — one tap copies it into your comment
• Effort, ownership and the tools that fit

PDF REPORT FOR MANAGEMENT
Management summary with a radar chart, category overview, gap analysis, per-measure detail with your comments — and, if you want, the implementation guidance for everything below target.

FIVE LANGUAGES
German, French, Italian and English from the standard, plus an unofficial Romansh version. Switchable at any time, independent of the system language.

FULLY OFFLINE
No account, no cloud, no analytics, not a single network request. Your assessment stays on your device — which is rather the point for a cyber security tool.

SEVERAL ASSESSMENTS
One per year or one per site: create, duplicate, rename. Everything can be exported as a backup file and imported again.

TRY IT FOR FREE
The first four measures of every function — 20 of 108 — are fully readable, ratable and include the complete guidance. No time limit.

PRO
Unlocks all 108 measures, the PDF report, backup export and import, and as many assessments as you like. Monthly, yearly, or a one-off purchase without a subscription. One purchase covers iPhone, iPad and Mac.

AN INDEPENDENT APP
treeinspired GmbH is not affiliated with, authorised by or endorsed by the Federal Office for Cyber Security or any other Swiss federal body. The standard itself is published by the Confederation and is available there free of charge. What you pay for is the implementation guidance, the assessment and the report — not the standard.

The Romansh version is a machine-assisted translation and is marked as unofficial throughout the app. The app replaces neither an audit nor a certification, and it is not legal advice.

Terms of Use: https://treeinspired.com/terms.html
Privacy Policy: https://treeinspired.com/privacy.html