IT Baseline Protection Manual
An IT baseline security concept does not build on a detailed risk analysis. Instead this approach is based on generic threats without consideration of individual cost per incident or the probability of a certain incident to occur at all.
There are three protection requirement categories. By choosing from these categories as defined in the Baseline Security Guide (“IT Grundschutz Handbuch”) the appropriate technical and organizational measures can be taken. However, the protection provided by this approach is limited.
IT-Grundschutz - die Basis für IT-Sicherheit (ger)
- Steps in the baseline security process:
- Definition of scope
- Analysis of IT infrastructure
- Estimating security requirements
- Performing basic security checks
- Implementation of baseline security measures
References
IT Baseline Protection Manual (eng)IT-Grundschutz - die Basis für IT-Sicherheit (ger)
DN-Systems at LinuxTag 2007
