IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
S 2.81 Preselection of a suitable standard software
product
Initiation responsibility: Procurer
Implementation responsibility: Procurer, Head of IT Section, Specialist
Department
The preselection of a standard software product is based on the Requirements
Catalogue drawn up by the Specialist Department and the IT Area. First, the
body responsible for preselection should conduct a market analysis and draw
up a tabular market overview based on the Requirements Catalogue. This table
should comment on the products in question with regard to the points
stipulated in the Requirements Catalogue.
The market overview should be drawn up by the IT Area. It can be compiled
using product descriptions, declarations by the manufacturer, journals or
information from retailers. Alternatively, an invitation to tender is possible
and occasionally required. The Requirements Catalogue should be the basis of
such an invitation to tender so that a market overview can be drawn up using
the offers received.
Finally, the products contained in the market overview must be compared with
the points contained in the Requirements Catalogue. To do this, the
assessment scale in S 2.80 Drawing up a Requirements Catalogue for
Standard Software can be used. On the basis of this information, it is
determined which of the required product features are in place. In the event
that certain required features are missing, the product is rejected. A total can
be determined using the assessment of the importance of the various features
of the products. A list of the most favourable products can then be drawn up
based on these totals.
Example:
The features for a compression program as stated in the Requirements
Catalogue are weighted as follows:
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000