IT Baseline Protection Manual - The Information Warfare Site

Threats Catalogue Deliberate Acts Remarks
____________________________________________________________________ .........................................
T 2.1 Lack of, or insufficient, rules
The importance of organisational regulations and requirements for IT security
objectives increases with both the level of information processing and the
protection requirements of the information to be processed.
Ranging from the assignment of responsibilities to the distribution of control
functions, the spectrum of regulations can be very broad. The effects of a lack
of, or insufficient documents detailing requirements, are described in T 2.2 ff.
The following examples illustrate the potential deleterious effects of
regulatory deficits:
- Insufficient resource management, e.g. the mere failure to re-order printing
paper, can seriously impair on-schedule operations in a computing centre.
- In addition to the procurement of hand-held fire extinguishers, their
maintenance must also be provided for so that they are ready for operation
in case of fire.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000