IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Communications Remarks
____________________________________________________________________ .........................................
S 6.34 Determining the factors influencing data
backup
Initiation responsibility: IT Security Management
Implementation responsibility: Administrator; staff responsible for the
individual IT applications
The following influential factors must be determined for each IT system,
possibly even for each individual IT application of particular significance. The
system administrators and persons-in-charge of the various IT applications can
be interviewed for this purpose. The results are to be comprehensibly
documented.
The following theoretical example is to demonstrate how the influential
factors can be determined in practice. This example involves a server-based
LAN with 10 PC's connected as workstations. The IT system is used for
processing orders with the help of a database. The application data are stored
centrally on the network server.
The following individual items need to be established:
Specifying the data to be backed up
The data stock of the IT system (IT application) required to perform the
specialised task must be determined. This includes the application and
operational software, system data (e.g. initialisation files, macro definitions,
configuration data, text blocks, password files, access-right files), the
application data as such and the protocol data (log-ins, security violations,
data transmissions).
Sample result 1: Specifying the data to be backed up
IT system: Server-based LAN with 10 connected PC's
Data to be backed-up:
- Software: Network operating system, PC operating systems, word
processing software, database software etc. in the form of standard
software
- System data:
On the network server: System-internal settings (e.g. authorisation
structure, passwords)
On the PC's: Initialisation data of the word processing and database
software, macro definitions and text blocks
- Application data on the network server: Files of written
correspondence, customer database
- Protocol data on the network server: Logs of network activities
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000