Although IT Grundschutz is not required by law, it is recommended in many areas or required by clients to ensure a high level of security.