Automated determination of the protection requirements

The protection requirements analysis is a part of the IT security concept according to the IT basic protection (IT-Grundschutz). Here, the protection requirements of business processes and applications are defined in the form of a protection requirements assessment. The protection requirement of each IT component involved is derived by inheriting the protection requirement determination. This blog article describes an approach that customers can use to efficiently integrate their protection requirement assessments into their IT service management and automatically derive protection requirements for any IT components.

 

 

 

Efficient management & use of protection requirements assessment with Versio.io

The creation, management and especially the operational usage of protection requirement assessments is not practicable for customers in terms of resource effort without software-based support. Versio.io provides customers with the following functionalities based on innovative approaches:

• Information basis for structural analysis - Versio.io uses the asset & configuration repository to provide all the information for the initial structural analysis as part of the protection requirements assessment in the form of data, processes, IT systems, applications, rooms and communication links to be considered.
• Management or integration of protection requirement assessments - Versio.io allows you to capture and edit protection requirement assessments or import them from third-party systems.
• Change management of protection requirement assessments - Versio.io detects changes in protection requirement assessments and historizes them in an automated and audit-proof manner.
• Determination of the protection requirement - Versio.io determines the protection requirements for each structural element depending on the existing protection requirements assessment according to different inheritance methods (maximum, dependency, accumulation, distribution).
• Compliance of protection requirement assessments - Each change to a protection requirement assessments statement can be verified for content (naming convention, completeness, etc.).
• Simulation of the impact of protection requirement assessments - Determine the impact of new or modified protection requirements on structural elements.
• Determination of cost optimization by means of inherited protection requirements - Identification of cost optimization based on inherited protection requirements and potential operational adaptation of structural elements (e.g. database management systems, virtualization platforms, etc.).

 

Read mote

 

Keywords

protection requirement assessments

 

Protection requirements

 

Inheritance

 

Aggregation

 

Protection requirement categories

 

Damage levels

 

Structural analysis

 

Structural element