IT-Grundschutz für KMUs und Hilfsmittel zum Grundschutz

8/6/2019 IT-Grundschutz fr KMUs und Hilfsmittel zum Grundschutz

1/24

b u n g a u s I S M 3

I T - G r u n d s c h u t z f r K M U s

u n d

H i l f s m i t t e l z u m G r u n d s c h u t z

M a n u e l F a u x M a r i o n H a l l e r

2 0 . D e z e m b e r 2 0 0 9

F H H a g e n b e r g


2/24

I n h a l t s v e r z e i c h n i s

1 . V o r s t e l l u n g d e s D o k u m e n t s 4

I F I F e l l m n o n F F F F F F F F F F F F F F F F F F F F F F F F F F F F F R

I F P F h ( n o n d s E n d F F F F F F F F F F F F F F F F F F F F F F F F F F F F F S

I F Q F e n q E o n m o d l l F F F F F F F F F F F F F F F F F F F F F F S

I F R F f l E v l n F F F F F F F F F F F F F F F F F F F F F F F F F F F F F S

2 . A n p a s s u n g d e r S c h r i t t e a u s d e m G S - V o r g e h e n s m o d e l l 5

P F I F s n n d o z F F F F F F F F F F F F F F F F F F F F F F F F F U

P F I F I F n m o n n o n d d v n n F F F F F F F F F U

P F I F P F u o n z o n n d l n n d o z F F F F F F F F F F F F F U

P F I F Q F i l l n n v l n z s n o m o n F F F F F F F F F F F F V

P F I F R F y n o n d o z F F F F F F F F F F F F F F F F F F F F W

P F P F i l l n n k o n z o n n s E q n d z F F F F F F F F F F F W

P F P F I F h ( n o n d q l n F F F F F F F F F F F F F F F F F F F F F F F W

P F P F P F k n l F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F I H

P F P F Q F z d l l n F F F F F F F F F F F F F F F F F F F F F F F F F F I H

P F P F R F e l n d e n n o n w n m n F F F F F F F F F F F F F F F F F I I

P F P F S F f E k F F F F F F F F F F F F F F F F F F F F F F F F F F F F I I

P F P F T F i n z n d n l F F F F F F F F F F F F F F F F F F F F F F F I I

P F Q F m z n d k o n z o n F F F F F F F F F F F F F F F F F F F F F F F F I I

P F R F e l n n d k o n n l n d s n o m o n I P

P F R F I F n d s n o m o n o z n l l n i n n F F F F I P

P F R F P F s n o m o n ) m s n o m o n m F F F F F F F F F F F F I Q

P F S F ( z n n s y P U H H I d f o n s E q n d z F F F F F F F F I Q

3 . B e u r t e i l u n g d e r A n w e n d b a r k e i t d e s G r u n d s c h u t z p r o l s 1 4

4 . H i l f s m i t t e l z u r E r s t e l l u n g e i n e r S i c h e r h e i t s r i c h t l i n i e 1 4

R F I F v d n s E F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F I R

R F P F k q n d z F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F I T

R F Q F l n d ( n o n F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F I V

A . V e r g l e i c h : F i r m e n p r o l f r e i n e k l e i n e I n s t i t u t i o n 1 9

e F I F e n n d d m q E o n m o d l l F F F F F F F F F F F F F F I W

e F I F I F s n n d o z F F F F F F F F F F F F F F F F F F F F F I W

e F I F P F i l l n n k o n z o n n s E q n d z F F F F F F F P I

e F I F Q F m z n d k o n z o n F F F F F F F F F F F F F F F F F F F F P P

e F I F R F e l n n d k o n n l n d s n o m o n E

F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F P Q

e F I F S F ( z n n s y P U H H I d f o n s E q n d z F F F F P Q

e F P F f l n d e n n d k d q n d z o ( l F F F F F F F F F F F F F F P Q

P


3/24

A b k r z u n g s v e r z e i c h n i s

B S I f n d m n d s n o m o n n k

B S I S I P O L m l o l n d m l o n D f s

G S q n d z

G S H B s E q n d z n d

I S s n o m o n

I T G S s E q n d z

K o n T r a G q z z u o n o l l n d n n z m n n m n

M U R I h o k m n w l n n n d f l k o n z d f s

T K l k o m m n k o n

Q


4/24


5/24

P h a s e 5 , D u r c h f h r u n g d e s B a s i s - S i c h e r h e i t s c h e c k s h f E k d n d i E

m l n d k l l m z n w n m n D l d w o d l l n d E

R n n F

P h a s e 6 , R e a l i s i e r u n g v o n I T - S i c h e r h e i t s m a n a h m e n h T d n d n l n m E

z n d o d l n m n m n n q r f F

P h a s e 7 , Z e r t i z i e r u n g e n l n d D n d m z n d w n m n n d d i l l n

d k o n z D k n n n s E q n d z E ( k d n n l z n z n s E

q n d z E e d o l l d n F

1 . 2 . D e n i t i o n d e s I T - V e r b u n d s

s m n n l d h o k m n d d s E n d d l n s n o n n

n F n d n f n d s E n d d s n o n l

n D o l n f n d q r f F

e l d n P z m d n e d s E s n k d s n o n F z E

l j d w n n l o n m e l z F i d l l m

m W i n d o w s 2 0 0 0 z n D o n n l O c e - L s u n g n z z n D m d n d E

m n n e n d z m n m n F f n n D n d l l h k d k m d n

g n d n Y j d o z x z k d k F e l l g n d n n n n m

n d n d o m m n n d n z Y l l l o n o d h v E w o d m n d m d

u E e n l k o l F h n z n d n n n d e n n d n d u E e n l

m d l o n E n d s n n l l F

h m l k n d s n o n D l o o l l f o m z n n n

d s E s n k d n n D ( n d n m d n o k k n f o d D l

o n n d n n n m n n z d F

1 . 3 . A n g e p a s s t e G S - V o r g e h e n s m o d e l l s c h r i t t e

h q o l d h o k m n m d i l l n n l n n q E

r f F r d n d n n n l n d l D j d o m e n n n

n f z d q r f D m d n e n n n m l n d n n n m n z

d n F

1 . 4 . B e i s p i e l S i c h e r h e i t s - L e i t l i n i e

i d n E v l n w s n m l n d n n m n m z F

r o o n n k n n n n d d l l n d n F

2 . A n p a s s u n g d e r S c h r i t t e a u s d e m G S - V o r g e h e n s m o d e l l

s m o l n d n e n d l D d n z l n n n d i l l n n E

k o n z o n n d m q r f d l s n o n n o d n

d n F

h f s E n d d I H H E P D s E q n d z E o n D d m z n

n w n m n m n d m s E q n d z o z n F h o n

! m n m o n z l n ! n D l m h o k m n

S


6/24

e l d n P X x z l n d l n s E n d

T


7/24

s E q n d z d n w l n d ' n d n F

3

h d n d m f s E

n d d l l m n l n n d D m o o l k l n n n m n m l n d

o s n o n n z k n D d n d l n m d n e n n d

( k n s n o n z n n F

2 . 1 . I n i t i i e r u n g d e s S i c h e r h e i t s p r o z e s s e s

2 . 1 . 1 . b e r n a h m e v o n V e r a n t w o r t u n g d u r c h d i e L e i t u n g s e b e n e

h o v n n j d s n o n d n o l D d l l q E

o d n n m n k o n n n d k n z k n n d n F h m d

v n n d n o z n n D n n d k o n o l l n F h n o n

l l m w n m n D d e d I n f o r m a t i o n s s i c h e r h e i t d j d o n d n

s E n d l F

d k l o o D d d o v n n o z h l E

n d e d s n o m o n n d n s E n D d n n o E

l n d m M a n a g e m e n t p r o z e s s I n f o r m a t i o n s s i c h e r h e i t l F h f s E n d d

n n e ) n o n s n o m o n n d d m w n m n n o n l n

d n d n D o n z n d d m z n d w n m n m o m

w n m n d n o l l n F

h m l d m z n d m h o k m n s E q n d z d n w l n d n

n s n l z o n Y d l d l n D d d q n n n s E

n m m D d d m z n d w n m n m l E

F

2 . 1 . 2 . K o n z e p t i o n u n d P l a n u n g d e s S i c h e r h e i t s p r o z e s s e s

i n l d s n n d o z d l n n d o z

l F r m n n m n I S - S t r a t e g i e o m w n m n l d n F h

d n q z l n z n d m e d s n o n F h E

n m j d n q o z n d j d p o n n m l n e n E

n n n z m z d s n o m o n n l n d o n d q E

l n z m m d n F r z d f s E n d d n n e u o n o l l n k l o

z n d m n d n n n F

f n n j d o z o l l m n d s n o m o n z l m m n D

d n n z n n l l m n z l l d n F D d i l E

l n d n l n k o n z D d n d k o n k n o d n n

l d F r d f s E n d d n e ) n m l z l F

s m h o k m n s E q n d z d n w l n d d d d i l l n d s E E

n D n o d p l n d n o d d e n d s n o m E

o n z l F

3

D a , w i e b e r e i t s e r l u t e r t , d e r B S I - G r u n d s c h u t z s e i t V e r f a s s e n d e s D o k u m e n t s k o n z e p t i o n e l l b e r a r b e i t e t w u r -

d e , e n t s p r e c h e n d i e i m D o k u m e n t r e f e r e n z i e r t e n P h a s e n n i c h t m e h r g e n a u d e n P h a s e n a u s d e m B S I - S t a n d a r d .

E s w e r d e n i m f o l g e n d e n d i e P h a s e n d e s B S I - S t a n d a r d s 1 0 0 - 2 V e r s i o n 2 . 0 a l s R e f e r e n z h e r a n g e z o g e n .

U


8/24

h f s E n d d m ( l z m n n d n d s E l D d d n E

n n z l n q o z n f z z d n q n d d s n o m o n E

d D m o n n m n n o n d o o n

q o z m m n z k n n n F r m d v n n n d n l E

n d n d p o m l n d s E l l n F

e z d n n k n n d m s E q n d z d n w l n d k n w n m n

o n F

2 . 1 . 3 . E r s t e l l u n g e i n e r L e i t l i n i e z u r I n f o r m a t i o n s s i c h e r h e i t

i n z n l n k d o z n n d i l l n n ) ( n

v l n z s n o m o n F h l l m n n d l l k D

m l n w l n n d m l n k n d s n o m o n n n l d s n E

o n l l d n o l l F s n o l l n d n n s E l n n d n F

w d s E v l n d l D m l n n w l n d q l E

n z i n d s E l F h s n o n l n o l l o m l l z m m

n F

n l f n d l d s E v l n d q l n F h v l n k n n s n E

o n l n o d n l d s n o n z ' n F i n s E v l n o l l

n m l P H n n D j d o m n d n G e l t u n g s b e r e i c h D I S - Z i e l e n D S i c h e r -

h e i t s s t r a t e g i e n d d d m z n l n O r g a n i s a t i o n s s t r u k t u r n F o l l

d v l n l s n o m o n n n l n D o l l n d n d i n d d h o k m n

l d n n d l z l l k n n z n d n F

h f s E n d d o D d n s E w n m n E m ! o n m n n E

m n o n d n ! d s n o m o n n d s E v l n F o l l o n m n o

n n D d m o l n n i n k l n z i n d l l n

z n d n D d d n n m v d n n d i n n d o z

z m s E w n m n E m F

h s E v l n o l l j d n w l z n z n l l d n F

s n l m n e n d n o l l d v l n d n n d e k l E

d n F i o l l o n d n d n n n d n q z l n D d n q o z n

l o d d y n o n k d n F e d i n n o n n n s E

q n m n d n m n ) n F h f s m ( l n z E j l E

n F

p n m l s n o n d f s m q o n n d q n z n d l n s n l d

v l n o F h h o k m n s E q n d z d n w l n d 4 d s n l

j d o n n D o n d n l k m F i n r n l l z

n d n n d D l z m f l n z l F e d m h o k m n n d l n

d v l n n n n F

p d i l l n d v l n D k n n m o d n q z n d D o n d n

d s E F i d d n m o l n D d d n o k o m

n d s n o n l n d n l n i k n k d v l n F h

f s h o k m n n l k n n r n z l m n n d s E v l n F

V


9/24

2 . 1 . 4 . O r g a n i s a t i o n d e s S i c h e r h e i t s p r o z e s s e s

p n d f s E n d d d y n o n d o z F m d n I S -

P r o z e s s n o n m z z n D n d n o l l n n n l d s n o n E

z l n n d d n n z l n e n z z o d n n F h n y n o n k n

o n d q n d n n f ' n d s n o n k F e j d n p l l o l l n

s E l z n l e n n n n n d n F s n n s n E

o n n d l o n n n D d n n l n z l d n Y

d s E w n m n E m k o o d n d n k n F h o l l n o l l n l l l n

o n n D m d n d k n n z s n o n l n z l l n F

h q m n o n l n d s n o n l n D j d o m n d n

n o n z n n n n D d d n s E o z d n d k o o d n Y d z m d s E

F h n n o j d w l m n n n l e E

d e l n d s n o m o n n n m e l z n d

n n n m n n o l F

h n d n d d n s n o n n d s E y n o n n d

n d s n o n k F e d n n e n D n o n n n d u o m E

n z n n d s E y n o n o d s E n D d s E w n m n E m

o n d n o l l n n d s E y n o n d n n d ( n F

s m q E o ( l n m l s n o n n d d s n l o n d y n o n d

o z D n o d n o l l n z ( n d n F h n z o l l d s E y n o n d

s E F

2 . 2 . E r s t e l l u n g e i n e r S i c h e r h e i t s k o n z e p t i o n n a c h I T - G r u n d s c h u t z

i n l d s E q n d z D n o n z i z l n n n o m l n E

n n z n F h k n n l f n n d n n F e E

n d d n d n n d d E m n m n m o l n Y d n d n f n n E

l D o d n n d z n k n n n @ e l d n ( X k o n z o n F n A F

n n d m d d w o d k d s E q n d z n n d d q l d n

n d h ( n o n d q l n D d k n l D d z d l l n D d

e l n d d e n n o n w n m n D d f E k o n d

w n m n F

2 . 2 . 1 . D e n i t i o n d e s G e l t u n g s b e r e i c h s

y i o l n d n d l k l n n d n l n n d k o n n l

n o z F i m z n d f l d n D d n d u o n z o n

l l d F s m s E q n d z d d q l n l s E n d z n F

i d m q E o ( l n k z d s E k o n z n F h d n E

k o n z o n n n d n n n d l n d F h n k n d n d k D o

d n z m f l m o ( l m l s n o n n d f E k n E

l F

W


10/24

e l d n Q X i l l n d k o n z o n m s n o m o n m n m n

2 . 2 . 2 . S t r u k t u r a n a l y s e

h m m n l d n q o z D d n e n n d n n d d e n l z E

n h o k m n o n d s n o m o n n k n z d k n l F r

n k n z n o n s E m n l D d n x z o o l o l n l

e n d n e n l n F

h k n l m q E o ( l m l n d n n m n k z l n F h

n n m d e n d x z l n D d z d i n

d s E m n d d d d n l n d i n d s E e n n d n n n d

d z n s n o m o n n F

2 . 2 . 3 . S c h u t z b e d a r f s f e s t s t e l l u n g

i d m l D l z d q o z D d n s n o m o n n

n d d n z s n o m o n n k n d n d n m n F p o l d n m E

n l n z d n Y d i n l n n d z d k o n

F

h n k d n m l n n n m n l d F i d n n d d

f l n l D d q o z m l d m q E o o l d n F

I H


11/24

2 . 2 . 4 . A u s w a h l u n d A n p a s s u n g v o n M a n a h m e n

x d m d k n l n d d z d l l n o l n D d d s E n d

m r l d o n d n f n l d F h i n n s E q n d z E w o d l l d

s n o m o n n d m n f n n F n d m u l d n n o n

d f n D d q d n k l o o d w n m n k l o l F i o l d

n l n d w o d l l n n s n o m o n n d Y k d n d n

m n F e n l n d d m l e k o n n k n d e l n d

e n n d w n m n n d l F

s m q n z z m f s E n d d n n n d u l j z w o d l l n F h q n E

l n n d n F i d n m o d l l d n m d q r f d l l

n d k z n F t n n d n d n f n k n n n d y j k

o n n d l e n X n z l n u o m o n n n D q n o n u o m o n n n D q d D

v n o d y n o n n n F d n n d m o ( l d m l n n n E

m n d o d n n e k z n f n n d D d n n f n d

s n k D d s E m D s E x z n d s E e n d n d n n F

2 . 2 . 5 . B a s i s - S i c h e r h e i t s c h e c k

h f E k m n d d d o n o n o n d d n

d z n e k o n n k n F h h n d o l l E s E l d n D d n k l E

d e k o n n k D z i m l n d m z n F i d k n n l l d h o E

k m n o n n d n F

s m o ( l d n n m n d k d n k D d e k o n n k D m d m

n d d F h m z n d n n F

2 . 2 . 6 . E r g n z e n d e S i c h e r h e i t s a n a l y s e

p d n q o z D e n n d n n n d s E m n d d n d d E E

m n m n n d l n d F i d d z ( e n z d s E q n d z E

o n n d d o n z n z n d n n l n E

n n d m n m f l n F i o l d k o n l d f d s E

q n d z F

s m h o k m n q E o ( l m l n d n n m n n n i k z d m

m i n z n d n l F i n k z f n D d n k n

o n n l F

2 . 3 . U m s e t z u n g d e r S i c h e r h e i t s k o n z e p t i o n

h m f s E n d d n m z n o l z m n n d n E

n n F i d n l l l n d n z n n l m z n w E

n m n l l F e n l n d d d u o n o l d n d w n m n D o n

I I


12/24

n l l i n l l n d m z n n D m f l n n F d n E

n d h o k m n o n F i o l n u o n E n d e n d z n D o d k o

d x E l n n w n m d l d D z m f l d n n d

f d F

s d n z d m f s E n d d d n d n m l n d n q E o ( l d n n E

n n l l F i d n l l l n o d n m z n i n

d m f E k n o m m n n d n n l l l F

f d u o n E n d e n d z n d d n m l n d n n n m n z E

n n m l n n d d k n d n s n o n k o n z n o n l n d n

n d n F i o n o l d j l n u o n E n d e n d z n n m n m

m n m s E n o l n d z n F

i o l d p l n d m z n n o l d w n m n F e n d o n z E

n f d o d o n l l o n k n m n n o l d m z n

d w n m n l d n F e n l n d d n d e n n d d n o n E

n F i d m m D n n l w n m z l n n d

d n d l n z n d F l n l n d w n m n D m

z l l n n l n m n m n d n n l n m o ' n w d

x o n d k n d d u o n n z n d w n m n z n n F

q l e l ( n d d m z n n o l D o d p l E

n d n o l k n m h o k m n d w l n d F i d z n D d

d n o l n d u o m n z n d m z n d w n m n z F

l n l n d w n m n d n m q n d z o ( l n m l n d n n E

n m n n l m n d d m z F

2 . 4 . A u f r e c h t e r h a l t u n g u n d k o n t i n u i e r l i c h e V e r b e s s e r u n g d e r

I n f o r m a t i o n s s i c h e r h e i t

2 . 4 . 1 . b e r p r f u n g d e s I n f o r m a t i o n s s i c h e r h e i t s p r o z e s s e s i n a l l e n E b e n e n

w o d n n n d s n o m o n o z d n l F i o l

d n d m n m n D o d n o d z l

m d m i n z d k l d n k n n n F e l l d

i n d n n d n s n o m o n o z n o m m n F

h e l n n d d k o n n l n n d s n o m o n

m q n d z o ( l n n k z e z d m F

n n d m d n m k D d n l D d d s E f m d

e l n d o z k m m n n d d m z n d w n m n o d i n E

l n d l n n n m F n o z d l l @

e l d n R A F

I P


13/24

e l d n R X h l l n d o z

2 . 4 . 2 . I n f o r m a t i o n s u s s i m I n f o r m a t i o n s s i c h e r h e i t s s y s t e m

s m n d d l n D d s n o m o n ) m s n o m o n o z E

z n F n n d m d n f n d v n n D h o k m n o n n D o

d w l d n d l F

s m h o k m n d m l n d n n n m n d d s n o m o n ) n n

n d l F h s E n j d m p l l z n o m n D d n n l d n

n z n o z F

2 . 5 . Z e r t i z i e r u n g n a c h I S O 2 7 0 0 1 a u f d e r B a s i s v o n I T - G r u n d s c h u t z

h f s E n d d I H H E P n l d d n n s n n n n s y P U H H I E ( z E

n F h q n d l d n s y P U H H I E ( k d f d s E q n d E

z D d h n n e d m l n m n n e d o F e n m k n d d

o l o n ( k n n w n o n d ( z n F i

d n n o l n d d e k o n n k n ( z n z F

s n d m o ( l d q n d z m l n n m n d n k n l e n D n d E

l n d d ( z n D D n d n d d f s l z n z s E q n d z E

e d o d l l n d d l n d w n m n F

I Q


14/24

h n n o d d l n D l n d n k n n n D l n d n

q l k n d o d n l n n d F

h z n d l ( z n d o n n D d m z n d n d d E

m n m n F h z m q r f d o n e D f D g n d Y d n d

n r n d m z n n o l d n d d m n m n F

3 . B e u r t e i l u n g d e r A n w e n d b a r k e i t d e s G r u n d s c h u t z p r o l s

h l d e d h o k m n m d m l i n s E q n d z E

o ( l d n w l n d d z n k V e r s t n d l i c h k e i t n d P r a x i s b e z u g z n l n

n d d n d n n k V e r b e s s e r u n g s - b e z i e h u n g s w e i s e W e i t e r e n t w i c k l u n g s v o r s c h l g e z E

n F

V e r s t n d l i c h k e i t q n d z l d n d l k d h o k m n n F h n n o

o n o l D m d n h o k m n n v d n s E n d 4 f s E n d d I H H E P

z n F h v d n d n o z n l f d n d l k

d h o k m n n d d n d d I H H E P l i n D d d j d n n m n

n n d n m n d d l s n o m o n n n l F

P r a x i s b e z u g s m h o k m n s E q n d z d n w l n d ( n d n d n E

e n n d n l D d d z n F h d e n n d n l

k n n m n d n s E q n d z o n o l m n d m z n D o z d m d

s E q n d z d n w l n d l l m n D n l d n d d D o m l F

V e r b e s s e r u n g s - b e z i e h u n g s w e i s e W e i t e r e n t w i c k l u n g s v o r s c h l g e i l d E

l d e n n d n l d n w l n d n z n F e n n d d m l E

n d n n m n l D n l n d j d o n k z n d l F w n ( n d

k n l g k l n D m v d n o d m q n d z o ( l u l n n n m n F

4 . H i l f s m i t t e l z u r E r s t e l l u n g e i n e r S i c h e r h e i t s r i c h t l i n i e

h f s l l r l m l z i l l n n n d d l l n l n n

d m q r f z n F d o o l d n n n k z o l l F

4 . 1 . L e i t f a d e n I T - S i c h e r h e i t

e n l o z d i n k l n n d s n o m o n n k n d e n o d n n n d

s n o m o n F s m q n z z d n d n u o m l d s E o d k E

n d j d o l n d o n n d z k n f d l l l F

h s E v d n d f s d n k o m k m m l n d n

w n m n p n o l n d e d m n o n n k l n n n d m l n d n

n n m n o n f d n F w l g k l n d d e n l d n n E

o n n F z o n f l m f s n o m o n n z n d

I R


15/24

n o n o n D n k l l n n d n n w n m n D o d E

n l n o n q n F e n h l d z F

h d e n n d n d v d n k n n n n d s n o m o n E

n l d n F

I n f o r m a t i o n s s i c h e r h e i t i m F o k u s h z u l l l m d m

f ' s n o m o n D d n i l n D d k n d d n n d n x E

n ' k n F

W i c h t i g e B e g r i e r u n d u m d i e I n f o r m a t i o n s s i c h e r h e i t e n d d n d q n d E

d s n o m o n X l k D k n d s n d n

f ' l F

V o r s c h r i f t e n u n d G e s e t z e s a n f o r d e r u n g e n i d D m n u l D n l k

z l l n n m f z z s n o m o n n F i d n n d m

n m k D d m n o n D d d ' n l k n o n

n n d k n n n d D z m f l d e k l z u o n q F r n l h E

n z m m f n o n d l n n F

S o n i c h t : S c h a d e n s f l l e a l s w a r n e n d e s B e i s p i e l u l n n l n z n n d l

n n d f l n n o l l n F i n d n j d m z n o w n m n l D d

e n n d n D d d n l l n d n o l l n F

D i e h u g s t e n V e r s u m n i s s e r ( m n n d d n n ( n d m n m E

n u l F h m n n d j d n n m n n l z n

n d o m n d d l n d l z n F n n z n d

s n o m o n n z m m n l n z o i n n n d i l E

m n d n d n n n k n d l D d n n l n d m o l n d n

u l n m n w n m n z F

W i c h t i g e S i c h e r h e i t s m a n a h m e n m d n m u l n m n n

n d n n n z k n d n m n u l m n m n

d l k l F s m r l d v d n d k l D d m k n E

k o n z n d l D o n d n d s n o m o n n o z D d n d d m

v n d n l n d n m F i d z j d w n m n n l n d f n d n

n D m d d d n o l l F f n o l l m n d n z n E

d n n D n e n m k n n n k n F

D e r I T - G r u n d s c h u t z d e s B S I i n n n n m n z ( k o n z E

d d m z n n u o n D o n l k n d u o m E

o l F h d n n z n D z d u l n n z l l o n E

D o d o l d d y n n n d s E q n d z E o n d

f s F e l n n k d n d s E q n d z d f s l q n d l n o o n l l n

k o n z n d d n o l d f n z D d k d s E q n d z E

u l o n d n l n d d h n n q n d z n l n n d l F E

z l z d n h o k m n n d n z l l o D d q E o o l D n z F

I S


16/24

S t a n d a r d s u n d Z e r t i z i e r u n g d e r e i g e n e n I n f o r m a t i o n s s i c h e r h e i t s n n n m n

o d n n D l o n k o n z o l d z D d n n m

n m n d n z ( z n l n F h l z u l n n i n l k D n l n

n d d ( z n n m l n d F r k n n o z l n n k o m m n D d n

k n n n d d k n ( z n n d m f n z n F

A n h a n g s m e n n d v d n s E ( n d n d o n n n g k l n F

i n d l d m z k S H p n D d d n s n l d w n m n z m m n n

n d o n n n l l n l k m l n F h d e n d g k l d

k l D l w n m n n o n d n d F e n l n d o l n k z f l n

k o n z n d d n s n l n u E e n l D o n d s n o m o n n

z d n n d l n m n F

4 . 2 . W e b k u r s G r u n d s c h u t z

h k n n D m f l d n n l n D m f l n n m l n D l n

i n n d n s E q n d z F w l n n d n m m n n d n E

d l n d q l n d o l F h e d k n d l n d d n

s n l n q E o n m o d l l n d o m l n d s E v d n F i d n z

j d m n k h o k m n z F o l n n d f s n z F

W a r u m I T - G r u n d s c h u t z e m f n n d k l m n n n l k D m

s E q n d z n z z n F s m z n l d n u l d d r l l E

l n d m s E q n d z k l n d n l n d n i n n n d n e d

u n F

h z o n d d n n m n i g v e q m r F l f l n d F

I T - S i c h e r h e i t s m a n a g e m e n t s n d m z n u l d k d k l D d

w n m n d s n o m o n E n d s E z n d n d m l n k n n d

w n m n m n n ' k s E m n m n z l n n d d l n

k n n F i d d s E q n d z E o n n z D d m e l d n S

d k F

I T - S t r u k t u r a n a l y s e s m d n u l d z l l f d s n o m E

o n n k n n y n o n d n o l l D d f d l s E n d

l D n d d n d n o n d n s n o m o n n d n s E n d n d d E

n u o m o n n n m m l F h m m l n d l k n l z n F

S c h u t z b e d a r f s f e s t s t e l l u n g d m n u l k l D l u o m o n n n z

n z d l l n n F e n l n d d d n z l n

n F x d n z d k o n o l d z d l l n d n E

z l n n u o m o n n n F h l D d n z d d s n o m o n n k z m m n

m d m n m n m n m n l n z k n n n F

I T


17/24

e l d n S X o n d m z n o n s E q n d z

M o d e l l i e r u n g n a c h I T - G r u n d s c h u t z i d m d r l d s E q n d z E u l o l

f n m D m n u l D n l s E n d m o d l l F h u l D

d f n l n u o m o n n n D l o n o n n n d l

o n d n i n z o m n n D o d o n n n d n f n n F

o m n d k n l n d d z d l l n d d n @

e l d n T A F

e l d n T X w o d l l n n s E q n d z

B a s i s - S i c h e r h e i t s c h e c k s m n u l d o d s n o m o n n k E

n d D o d o n o n w n m n n m z d n F e m f n n

o l n n r n z d n w n m n D d n n d o n d k D n E

l n d d n f l D o n k z n F

R i s i k o a n a l y s e h n u l d h n n k o n l D m n

d n o n d n s n k o n n m z d o d s n o m o n n k D d

m s E q n d z E f n n D n n d o d n D l d d n k n n n D

F f n n z l n y j k n m n d n k n n n d o k o m m n

i n d n o z D d n z n d n l D z m @ e l d n U A F

I U


18/24

e l d n U X i n z n d n l

R e a l i s i e r u n g s p l a n u n g e k D d m z n l n d w n m n D d n

m n u l n l F i n n o l l n n d l n l n n n d

n o l o n e l d n V l F

e l d n V X e l d l n l n n

Z e r t i z e r u n g d e s I T - S i c h e r h e i t s m a n a g e m e n t s h l z u l n n l k D

d o n n n n m l n m s E q n d z E ( k n E

n d n k n n F i d n n n d m d o l D o d o z d ( z n

l F

4 . 3 . Z i e l g r u p p e n d e n i t i o n

i n n n k d l n l l n d f n d l d d n

o n n d l n h o k m n F l l d m d m v d n s E n d

I V


19/24

d m k q n d k n o n n d l d f n d n c

L e i t f a d e n I T - S i c h e r h e i t h v d n D o n o n n p o n l n d

e d m n o n k l n n d m l n n m n o d f d n l F h d v E

d n k z l n D d n d z e n n d s m l m n n n s E

k o n z F

W e b k u r s G r u n d s c h u t z h u m q n z z m v d n d l n d E

n d n l f l d n d f l D o o n n D d o m q n d z E

k o n z o ' n n d F s n n d m l d n f l n d q n d z n n d

d k d n i n l n m l d n l l n d l F

A . V e r g l e i c h : F i r m e n p r o l f r e i n e k l e i n e I n s t i t u t i o n

A . 1 . A n p a s s u n g d e r S c h r i t t e a u s d e m G S - V o r g e h e n s m o d e l l

s m o l n d n e n d l d n z l n n n d i l l n n E

k o n z o n n d m q r f d l s n o n n o d n

d n F

A . 1 . 1 . I n i t i i e r u n g d e s S i c h e r h e i t s p r o z e s s e s

s m f s E n d d d d l k l D o d d v n n d n E

o z n d m d w n m n l l s n o m o n n l n m F i

d n n d m n D d m z n d w n m n m o m w n m n

d n m F

h m l d m h o k m n s E q n d z o ( l k l n s n o n n k n f E

n n k F

i d l d l n m k D d d q n d n d s E E

n n m m D d n d d q d s n o n n n w l k n d

h l o n d w F

I W


20/24

K o n z e p t i o n u n d P l a n u n g d e s S i c h e r h e i t s p r o z e s s e s h l n n d o z

l n d n n m n s E n d n o m f s E n d d I H H E P n D d

f m m n d s n o m o n z l n d d d o l n d n k o n k n E

n o d n n F

s m o ( l d u l n n n m n d d s E n n F i l n n l l

d s n o m o n z l n d d d l n d n n o d n n F

i d o m f s E n d d m o l n D d n n n f z d

q n d d s n o m o n z n n D m o n n m n n

o n d o o n q o z m m n z k n n n F

s m p m n o ( l n k l n s n o n n d z d m n k D k n w n m n o E

n F

E r s t e l l u n g e i n e r L e i t l i n i e z u r I n f o r m a t i o n s s i c h e r h e i t s m n d d d d l p E

n n v l n l z n l n k n F n n d m d z l m

k n d m l n w l n n d m k n d s n o m o n n n l d

s n o n l l d n o l l F i o l l n d s E l n n d n n d m

l n n w l n d d n o l l n F

h q l n l d v l n n n l o l l D d d s n o n

o d n n l l d s n o n z ' n k n n F h v l n o l l n m l

P H n m n D j d o m n d n n m q l n D l n D

n d n y n o n k n F l s n o m o n n D n d v l n D m n

l l k n n z n d n F

s m n d d n n s E w n m n E m D d s n o m o n n d s E v l n E

F h v l n o l l j d n w z n l n F

h v l n o l l k o n n l n d k l d n F e n d n n n

d n q z l n n d E o z n o l l o n d d n F n d n d E

n n D d d y n o n k ' n D o d i n n o n n n s E q n F

i d n z E j l n m o l n F

i d n k l n s n o n n k z d f ' l l n l F e n l E

n d o l n n z z m h o k m n f s s y v D m n l l n z l l n F

d n o n k z f l n n n m d k m z n z n F

u n n e n d m m n k o l n F

O r g a n i s a t i o n d e s S i c h e r h e i t s p r o z e s s e s h f s E n d d d l d y n E

o n d o z n d D n o l l n n n l d s n o n

z d ( n n F i d n z l n l D d n n o l d q m n o n

d s n o n l n F i ( n d m n d d n n e n l n d

d n n o l l n F

P H


21/24

s m p m n o ( l n k l n s n o n n d d s n l o n d y n o n d

o z n o d n o l l n z ( n d n F i d l d l f l n d g k l n

n F

A . 1 . 2 . E r s t e l l u n g e i n e r S i c h e r h e i t s k o n z e p t i o n n a c h I T - G r u n d s c h u t z

i n l d s E q n d z D n o n z i z l n n n o m l n E

n n z n F h k n n l f n n d n n F

e n d d n d n n d d E m n m n m o l n Y d n d n f n

n l D o d n n d z n k n n n F

i n d m o ( l k l n s n o n n n d n l m m n F e n

( n d m n d e l d n W F

e l d n W X k o n z o n

D e n i t i o n d e s G e l t u n g s b e r e i c h s y o l n d n d l k l n n d n

l n n d k o n n l n o z F i m z n d f l

d n D d n d u o n z o n l l d F s m s E q n d z d d q l n l

s E n d z n F

h h ( n o n d q l n d n d m o ( l k l n s n o n n n l F

S t r u k t u r a n a l y s e h m m n l d n q o z D d n e n n d n n d

d e n l z n h o k m n o n d s n o m o n n k n z d k E

n l F r n k n z n o n s E m n l D d n

x z o o l o l n l e n d n e n l n F

P I


22/24

h u l d k z l n F i d l f l n n d D d n d d l l

n d n k n n F

S c h u t z b e d a r f s f e s t s t e l l u n g i d m l D l z d q o z D d

n s n o m o n n n d d n z s n o m o n n k n d n d n E

m n F p o l d n m n l n z d n Y d i n l n n d

z d k o n F

e d z d l l n d n n k l n i n l k n d w

n F h z d k o n n n n o m l n n d o n z d F

e n d i l n d f l n F

A u s w a h l u n d A n p a s s u n g v o n M a n a h m e n x d m d k n l n d d z E

d l l n o l n D d d s E n d m r l d o n d n n f n l E

d F h i n n s E q n d z E w o d l l d s n o m o n n d m n f E

n n F s n d m u l d n n o n d f n D d q d n k l o o

d w n m n k l o l F i o l d n l n d w o d l l n n s n o m o n E

n d Y k d n d n m n F e n l n d

d m l e k o n n k n d e l n d e n n d w n m n n d l F

h e l n d e n n d w n m n n d l n F h u l

d w o d l l n n n n Y d d f l l D d f n n z n d n

n d F h i n D m n d d n D n l d s E k o n z o n F

B a s i s - S i c h e r h e i t s c h e c k y n o o n d d d z n e k o n n k d E

( n n d n k m n d d F i n o l l E s E l d n z i m l n d m E

z n F n d l n n k d h o k m n o n F

i n n f E k d k l n n s n o n n n F i d n

l n n m k F

E r g n z e n d e S i c h e r h e i t s a n a l y s e h n d d E m n m n n d n d l

n o m l q o z D e n d n d n n n d s E m n d F n n d m d

m n d d d z ( e n z d s E q n d z E o n n d d o n E

z n z n d n n l n n n d m n m f l E

n F i o l d k o n l d f d s E q n d z F

A . 1 . 3 . U m s e t z u n g d e r S i c h e r h e i t s k o n z e p t i o n

n n n d n m m l n d F p l n d o d n l m E

z w n m n d n l l l n n d n l n d k o n o l d F i n n E

n d h o k m n o n d n i o l l n d F e n l n d d n u o n E

P P


23/24

e n d z n D o d k o n n o d n l m z n w E

n m l F

i o l d p l n d m z n n o l d w n m n D l n l n d

w n m n n d n l l n l n m n m n F

h n z n d n n l D o d m z n d k o n z o n d

n f n n k F w n ( n d d n n m z n l F

A . 1 . 4 . A u f r e c h t e r h a l t u n g u n d k o n t i n u i e r l i c h e V e r b e s s e r u n g d e r I n f o r m a t i o n s s i c h e r h e i t

b e r p r f u n g d e s I n f o r m a t i o n s s i c h e r h e i t s p r o z e s s e s i n a l l e n E b e n e n i d n w o d n

n D d n n d s n o m o n o z n d F i o l

d n d m n m n D o d d z l F h i n

d n n d n s n o m o n o z n o m m n F

I n f o r m a t i o n s u s s i m I n f o r m a t i o n s s i c h e r h e i t s s y s t e m e m n d d l n D

d s n o m o n ) n d s n o n z n F n n d m f n d h o E

k m n o n n d d n o d d w l d n m n F

m m e l n n d k o n n l n d s n o m o n

n d k n e n n n d m o ( l k l n s n o n n F

A . 1 . 5 . Z e r t i z i e r u n g n a c h I S O 2 7 0 0 1 a u f d e r B a s i s v o n I T - G r u n d s c h u t z

s m f s E n d d I H H E P n l d o l n s y P U H H I E ( z n F h q n d l

d f d s E q n d z l d d h n n e d F i d n z z l

d e k o n n k n ( z n z F

h ( z n d d n k l n n s n o n n l l e l n F

A . 2 . B e u r t e i l u n g d e r A n w e n d b a r k e i t d e s G r u n d s c h u t z p r o l s

h l d e d h o k m n m d m l i n s E q n d z o (

n k l n s n o n d z n k n d l k n d z z n l E

n n d d n d n n k n E z n n k l n o l

z n F

V e r s t n d l i c h k e i t q n d z l d n d l k d h o k m n n F h n n o

o n o l D m d n h o k m n n v d n s E n d f s E n d d I H H E P

z n F h v d n d n o z n l f d n d l k

d h o k m n n d d n d d I H H E P l i n D d d j d n n m n

n n d n m n d d l s n o m o n n n l F

P Q


24/24

P r a x i s b e z u g s m h o k m n s E q n d z n k l n s n o n ( n d n d E

n e n n d n l D d d m e n n d h o k m n l F h

e n n d n l d l n d l f l n z o n n d m i n d d h o k m n E

( n d n n g k l n d w n m n D m l d n k o n z k l n

n n m n n d m z F

V e r b e s s e r u n g s - b e z i e h u n g s w e i s e W e i t e r e n t w i c k l u n g s v o r s c h l g e e n

k n n o l F

A b b i l d u n g s v e r z e i c h n i s

I F d m z n n F F F F F F F F F F F F F F F F F F F F F F F F F F R

P F x z l n d l n s E n d F F F F F F F F F F F F F F F F F F F F F F T

Q F i l l n d k o n z o n m s n o m o n m n m n F F I H

R F h l l n d o z F F F F F F F F F F F F F F F F F F F F F F F F I Q

S F o n d m z n o n s E q n d z F F F F F F F F F F F F F I U

T F w o d l l n n s E q n d z F F F F F F F F F F F F F F F F F F F F F F F F F I U

U F i n z n d n l F F F F F F F F F F F F F F F F F F F F F F F F F F F F I V

V F e l d l n l n n F F F F F F F F F F F F F F F F F F F F F F F F F F I V

W F k o n z o n F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F F P I

L i t e r a t u r

f s B S I D f n d m n d s n o m o n n k X I T - G r u n d -

s c h u t z F h t t p s : / / w w w . b s i . b u n d . d e / c l n _ 1 8 3 / D E / T h e m e n / I T G r u n d s c h u t z /

i t g r u n d s c h u t z _ n o d e . h t m l D e X I V F h z m P H H W

f H W S c h a u m l l e r - B i c h l D h s h F s F X s n o m o n m n m n G s n o E

m o n m D p r r n F P H H W F ! k m

P R

Documents

IT-Grundschutz für KMUs und Hilfsmittel zum Grundschutz