IT Baseline Protection Manual - The Information Warfare Site

Threats Catalogue Deliberate Acts Remarks
____________________________________________________________________ .........................................
reports which lay down clear priorities, it is probable that insufficient
resources will be made available for the IT security process or that these
will be applied in an inappropriate manner. In the latter case it is possible
to have an excessively high level of security in one sub-area and serious
deficiencies in another. Another common observation is that expensive
technical security systems are incorrectly used, rendering them ineffective
or even transforming them into security hazards.
- Impracticability of safeguard concepts. To achieve a consistent level of IT
security it is necessary that those in positions of responsibility within an
organisation co-operate with each other. Inadequate strategic direction and
unclear objectives sometimes result in different interpretations of the
importance of IT security. This can have the result that the necessary cooperation
is ultimately not forthcoming due to the supposed non-necessity
or inadequate prioritisation of the "IT security" task, and hence that the
implementability of the IT security measures cannot be taken for granted.
- Failure to update the IT security process. New IT systems or new threats
have a direct impact on the IT security position within an organisation.
Without an effective review concept, the IT security level will fall over
time. Thus, what was once really secure slowly gives way to a dangerous
illusion of security because people are often not aware of the new threats.
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000