Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper introduces a semi-automated certification system leveraging a Multi-Large Language Model (MLS) architecture combined with Hybrid Retrieval-Augmented Generation (HybridRAG) to facilitate BSI IT-Grundschutz certification. By addressing the challenges posed by the NIS2 directive, including a shortage of specialists and high implementation costs, the proposed system enhances efficiency and reduces costs while ensuring the quality of security concepts. Key results show that the integration of LLMs and Knowledge Graphs effectively supports various phases of the certification process, thereby meeting the increasing demand for security certifications among newly affected companies.
A Multi-LLM system can streamline the complex BSI IT-Grundschutz certification process, significantly cutting costs and improving efficiency amidst a specialist shortage.
This paper presents a novel approach to perform semi-automated BSI IT-Grundschutz certification using a MultiLarge Language Model system (MLS) with Hybrid RetrievalAugmented Generation (HybridRAG). Facing the challenges of the Network and Information Security Directive 2 (NIS2) directive, a shortage of specialists, and high implementation costs, our MLS architecture aims to increase efficiency, reduce costs, and support certifiers in maintaining the quality of security concepts while meeting the increased demand for certifications of newly affected companies. The system combines Large Language Models (LLMs) and Knowledge Graphs (KGs) to support different phases of the certification process, including protection needs assessment, modeling, IT-Grundschutz check, measure consolidation, and subsequent realization. Our architecture addresses the growing demand for security concepts and offers an approach to handle the digital security challenges introduced by NIS2.