The Bundesamt for Sicherheit in the Informationstechnik

Adhering to the foundational principles of the BSI requires you to implement a security process as outlined:

• Determine responsibilities on a management level
• Concept and planning
• Creating IT-Security handbook
• Maintaining IT-Security department
• Making resources accessible
• Incorporating employees

This is an iterative process with the core loop containing the following 3 steps:

1. Create a security concept
2. Execute the security concept
3. Maintain and refine, i.e., go back to step 1

Modelling IT-Systems

Planning a system includes the following steps:

1. System composition
2. Structural analysis
3. Need for protection
4. Modelling
   • Planned system
   • Production system

A system built using building blocks catogarized as follows:

• B1: Overarching aspects
• B2: Infrastructure
• B3: IT-Systems
• B4: Networks
• B5: Applications