IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
- The central tasks of the institution cannot be carried out without IT.
Swift reaction times for critical decisions require constant presence
of up-to-date information. Downtime is unacceptable.
Summary: failure of IT may be expected to result in the total collapse of
the agency/company or have serious consequences for large parts of
society or industry.
High:
- The protection of confidential information must comply with
stringent legal requirements and be increased in critical areas.
- The information processed must be correct; any errors must be
detectable and avoidable.
- Time-critical processes run in central areas of the institution or
large-scale tasks which are only possible using IT are carried out.
Only short periods of downtime can be tolerated.
Summary: in the event of damage, central areas of the agency or company
can no longer function. The result of damage is considerable disruption to
the agency/company itself or to third parties.
Moderate:
- The protection of information only intended for internal use must be
guaranteed.
- Minor errors can be tolerated. Errors which considerably disrupt the
fulfilment of the tasks must, however, be detectable and avoidable.
- Extended periods of downtime which lead to deadlines being missed
cannot be tolerated.
Summary: damage causes disruption within the agency/company.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000