IT Baseline Protection Manual - The Information Warfare Site

IT Baseline Protection of Generic Components
_________________________________________________________________________________________
2.3.2 Modelling of an Individual IT System
Depending on the object(s) under examination, the tables below serve different functions. If the IT
assets under consideration consists only of a single IT system or a single group of IT systems which
have the same configuration, same framework conditions and same applications, then as a minimum
the modules required for modelling can be read directly out of these tables. Modules with no entry in
the relevant column should be used as well if they are relevant to the individual IT system under
consideration.
If on the other hand the IT assets are composed out of different components, then the tables provided
below will help in checking whether modelling as described in Section 2.3.1 is complete. If, for
example, the present IT assets contains Windows NT clients, then all the modules which have an "X"
in the relevant table should be considered during modelling. Modules identified with "(X)" only need
to be used when certain conditions apply. These conditions are listed in Section 2.3.1.
Key:
X: The module must be applied to this IT system.
(X): The module must be applied to this IT system if the conditions specified in Sectio 2.3.1
apply.
X1: A server room can be replaced by a server cabinet.
IT Systems Stand-Alone Systems / Clients
Module DOS-PC
(Single
User)
_________________________________________________________________________________________
IT-Baseline Protection Manual: Otober 2000
UNIX
System
Laptop PC PC (Multiuser)
Windows
NT PC
Windows
95 PC
3.0 IT Security Management X X X X X X
3.1 Organisation X X X X X X
3.2 Personnel X X X X X X
3.3 Contingency Planning Concept (X) (X) (X) (X) (X) (X)
3.4 Data Backup Policy X X X X X X
3.6 Computer Virus Protection
Concept
X X X X X X
3.7 Crypto Concept (X) (X) (X) (X) (X) (X)
3.8 Handling of Security Incidents (X) (X) (X) (X) (X) (X)
4.1 Buildings X X X X X
4.2 Cabling X X X X X
4.3.1 Offices X X X X X
4.3.2 Server rooms
4.3.3 Storage Media Archives
4.3.4 Technical Infrastructure Rooms
4.4 Protective Cabinets