|
In the first place, an appropriate level of IT security depends on the IT Security Management system which is in use, and in the second on individual technical measures. Based on recognition of this fact, the Federal Office for Information Security (Bundesamt für Sicherheit in der Informationstechnik - BSI) has further developed its IT-Grundschutz manual into a BSI Standard (100) and has proven the compatibility of this standard with the ISMS approach of ISO 27001. The BSI accordingly also offers ISO 27001 certification based on the BSI concept of IT security.
Our service
- "Current status" regarding the IT security in an organisation, e.g. by means of a "Quick Safety Check" or an IT-Grundschutz assessment
- Support with regard to procedural conformity, in particular determination of the necessary level of IT security, establishment of the IT security policy, IT structural analysis, establishment of the level and type of security which is required, modelling
- Planning and implementation of information events and seminars to establish sensitivity to and effective handling of IT security in all phases of the IT security process
- Planning and implementation of basic security checks and effectiveness analyses
- Planning and implementation of IT-Grundschutz audits as a foundation for auditor attestations and certification procedures according to ISO 27001 on the basis of IT-Grundschutz
- Support of ISO 27001 certification on the foundation of IT-Grundschutz
- Monitoring and optimisation of the IT security which is in current operation
- Planning and implementation of expert training on the subject of IT-Grundschutz
- Training of BSI auditors for ISO 27001 on the basis of IT-Grundschutz (on commission of the BSI)
- Project management and coaching
|
Benefit/Usefulness to you
- The services we offer embody competency and a serious approach at the highest level, augmented by close links to actual everyday practice and individual consideration of the real IT security needs of your organisation as regards protection
- Systematic IT security, focused on actual practice
- "State-of-the-art" security management
- Implementation of security measures which are always appropriate (i.e. which can also be justified from a financial point of view)
- Prevention of security breaches, in order to reduce risks
- Development of trust in business relationships with your customers and business partners
The procedure
- A modular offer tailormade to your requirements in the form of training, advisory and audit programs
The objective
- Proof of the conformity of your IT security process with the requirements of the BSI
- Certification of your own Information Security Management System (ISMS) according to ISO 27001 based on IT-Grundschutz through the BSI
- Recognition of your institution as a supporter of integrated information security with a solid base of enacted measures
|
