19.12.2012 Views

IT Baseline Protection Manual - The Information Warfare Site

IT Baseline Protection Manual - The Information Warfare Site

IT Baseline Protection Manual - The Information Warfare Site

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Safeguard Catalogue - Communications Remarks<br />

____________________________________________________________________ .........................................<br />

S 6.1 Development of a survey of availability<br />

requirements<br />

Initiation responsibility: Head of <strong>IT</strong> Section, <strong>IT</strong> Security Management<br />

Implementation responsibility: Staff responsible for the individual <strong>IT</strong><br />

applications<br />

<strong>The</strong> availability requirements are to be identified for the <strong>IT</strong> applications run on<br />

an <strong>IT</strong> system and for their data. Since an <strong>IT</strong> application does not necessarily<br />

require each element of the <strong>IT</strong> system, the availability requirements of <strong>IT</strong><br />

applications are to be mapped onto the essential components of the given <strong>IT</strong><br />

system. <strong>The</strong> result of this activity can be represented in the form of a survey<br />

covering the following:<br />

<strong>IT</strong>-System <strong>IT</strong> component <strong>IT</strong> procedure tolerable<br />

down-time<br />

central system host travel allowance 5 man-days<br />

(Reading: <strong>The</strong> <strong>IT</strong> component "host" in the <strong>IT</strong> system "central system" has a<br />

maximum tolerable down-time of "3 hours" due to the "accounting".)<br />

A practicable approach is to ask the procedures officer about the tolerable<br />

down-times of the used <strong>IT</strong> components with regard to the various <strong>IT</strong><br />

applications, in order to list the results by <strong>IT</strong> system and component in the<br />

table.<br />

Such a survey makes it easier to extract those components of the <strong>IT</strong> system<br />

which are particularly time-critical and for which contingency planning is<br />

indispensable. In addition, this survey provides information about the affected<br />

<strong>IT</strong> applications and their availability requirements in case of the failure of any<br />

one of the components.<br />

<strong>The</strong> users and/or customer departments/specialised divisions must provide the<br />

rationale for such availability requirements. This must be done at this stage<br />

____________________________________________________________________ .........................................<br />

<strong>IT</strong>-<strong>Baseline</strong> <strong>Protection</strong> <strong>Manual</strong>: Oktober 2000<br />

accounting 3 hours<br />

data transmission E-Mail 3 man-days<br />

accounting 1 man-day<br />

printer travel allowance 10 man-days<br />

accounting 2 man-days<br />

applications<br />

planning<br />

1 man-day<br />

LAN Servers data acquisition 1 man-day<br />

control station 4 hours<br />

PC data acquisition 10 man-days<br />

PC control station 4 hours

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!