IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Communications Remarks
____________________________________________________________________ .........................................
Sample result 6: Modification times
Software: Modification only on a change of version
System data: Frequent modifications
Application data:
Files of written correspondence: Daily modifications
Customer database: Daily modifications
Protocol data: Continuous modifications
Deadlines
It should be clarified as to whether certain deadlines must be observed for the
data. This can involve storage or deletion deadlines relating to person-related
data. These deadlines must be considered when laying down the data backup
policy.
Sample result 7: Deadlines
Software: Storage not necessary
System data: Storage not necessary
Application data:
Files of written correspondence: storage period for accounting
documents is six years (§257 HGB), an annual data backup should
be stored for this period
Customer database: Storage not necessary; deletion deadlines are to
be observed in accordance with Federal Data Privacy Laws (§ 20
and § 35)
Protocol data:
After weekly evaluation of the protocol data, 2 MB must be stored
regularly for one year or until checks are conducted by the Data
Privacy Officer.
Confidentiality requirements
The confidentiality requirement of a file also applies to any backup copy.
When adding backup copies with the same confidentiality requirement on to
one data medium, this can result in an increased confidentiality requirement of
the data stored. Consequently, specifications must be made as to the
confidentiality requirements of the individual data blocks needing backup, as
well as the data combinations which have a higher degree of confidentiality
than the original data.
Sample result 8: Confidentiality requirements
Software:
Low confidentiality requirement as these are publicly available data,
only copyright regulations must be observed
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000