IT Baseline Protection Manual - The Information Warfare Site

IT Baseline Protection of Generic Components
_________________________________________________________________________________________
The applications are then in each case assigned to the IT systems which are necessary to run them.
This can be the IT systems on which the IT applications are processed, but it could also include IT
systems which transfer data generated within the applications.
The result of this exercise is a summary of which major IT applications are processed on which IT
systems, used by which IT systems and/or transferred by which IT systems. It is recommended that the
results are documented in tabular form.
Example: Bundesamt für Organisation und Verwaltung (Federal Agency for Organisation and
Administration, BOV) - Part 3
The table below shows an excerpt from the data collected on IT applications and their assignment to
the IT systems concerned in the fictitious example of the BOV.
Applicn
no.
Description of the IT applications IT-Systems
IT application / information Person
related
data
A1 Processing of HR data X X
A2 Benefits processing X X
A3 Travel expense accounting X X
_________________________________________________________________________________________
IT-Baseline Protection Manual: Otober 2000
S1 S2 S3 S4 S5 S6 S7
A4 User authentication X X X
A5 System management X
A6 Exchange (e-mail, diary) X X
A7 Central document administration X
Key: Ai X Sj = Execution of IT application Ai depends on IT system Sj .
Legende Kapitel 2.1