Roadmap and Positioning
Three Phases through 2027
Phase 1 — Foundation (Q3 2026)
- Naming and domain registration (
gcbok.org) - Canonical acronym definitions (GCUCB, GCEP, GCAL, GCSYNC, V7GUID)
- GCBoK Tier-1 chapter structure (7 axes)
- V7GUID specification as first standard entry
Phase 2 — Development (Q4 2026 - Q1 2027)
- GCRef OSCAL catalog (GoBD/NIS2)
- GitCover Compendium (website)
- Establish community review process
Phase 3 — Authority (Q2-Q4 2027)
- IETF RFC preparation (V7GUID/GCEP)
- Certification scheme (ISO/IEC 24773)
- Pursue BSI/ENISA partnership
Website Milestones
| Phase | Period | Milestone |
|---|---|---|
| Phase 0 | Q3 2026 | DNS gcbok.org -> Caddy; staging gcbok.gitcover.org active |
| Phase 1 | Q4 2026 | GCBoK v0.1 online (DE+EN); acronym directory as JSON-LD; WCAG 2.1 AA |
| Phase 2 | Q1 2027 | GCRef OSCAL download; /api/ machine-readable; changelog |
| Phase 3 | Q2 2027 | Additional languages; community feedback via Gitea Issues |
Positioning: GCBoK vs. BSI State-of-the-Art Library
| Criterion | BSI State-of-the-Art | GCBoK |
|---|---|---|
| Operator | Federal authority (BSI) | GitCover Commons gUG (GCC) |
| Scope | German IT security regulations | Git-native compliance (DE/EU/international) |
| Format | OSCAL JSON | Normative: Markdown — Machine-readable: GCRef (OSCAL) |
| Target audience | ISMS operators, authorities | Entrepreneurs, SMEs, developers, auditors |
| Authority | State-mandated | Community-normative (BoK model) |
| License | CC BY-SA 4.0 | Target: CC BY-SA 4.0 |
| Versioning | Git (GitHub) | Git (git.gitcover.org) — Git-native self-referential |
| Uniqueness | Reference for § 8a BSIG | Only normative source for Git-native compliance |
Language Strategy
- DE is the primary authoring language (GoBD, AO, BSI are defined in German)
- EN is an equally mandatory translation for international citability
- Future languages (FR, PL, additional EU official languages, VI) prepared via i18n keys