In almost all cases, personal information is particularly sensitive information. Typical examples include information about personal or material circumstances of an identified or identifiable natural person. If the protection of personal data is not adequately ensured, there is the risk that the social or financial standing of those concerned will be impaired.

For example, personal data may be misused when an organisation collects too much personal data, has collected it without legal cause or the consent of the individual, uses it for a purpose other than the permitted one for which it was collected, deletes personal data too late or gives it to third parties without authorisation.

Examples:

Propojené úkoly

Vazby
is blocked by ORP.1.A1 Specification of Responsibilities and Provisions [Top Management]
is blocked by ORP.1.A2 Assigning Responsibilities [Top Management] (B)
is blocked by ORP.1.A4 Separation of Roles Between Incompatible Tasks (B)
is blocked by ORP.1.A15 Contact Persons for Information Security Issues (B)
is blocked by ORP.1.A13 Security During Relocation [IT Operation Department, Building Services] (S)
is blocked by ORP.1.A16 Policy for Secure IT Use [User] (S)
is blocked by ORP.2.A1 Well-Regulated Orientation of New Employees [Supervisor] (B)
is blocked by ORP.2.A3 Defining Deputising Rules [Supervisor] (B)
is blocked by ORP.2.A5 Confidentiality Agreements for Third-Party Personnel (B)
is blocked by ORP.2.A15 Qualifications of Personnel [Supervisor] (B)
is blocked by ORP.2.A13 Security Vetting (H)
is blocked by ORP.3.A1 Top Management Awareness of Information Security Issues [Supervisor, Top Management] (B)
is blocked by ORP.3.A3 Training Employees in the Secure Handling of IT [Supervisor, Human Resources Department, IT Operation Department] (B)
is blocked by ORP.3.A7 Training in the IT-Grundschutz Methodology (S)
is blocked by ORP.3.A9 Special Training for Exposed Persons and Organisations (H)
is blocked by OPS.1.1.5.A5 Complying with Legal Framework Conditions (B)
is blocked by OPS.1.1.6.A11 Using Anonymised or Pseudonymised Test Data [Data Protection Officer, Tester] (B)
is blocked by OPS.1.1.6.A13 Separating the Test Environment from the Production Environment (S)
is blocked by OPS.3.1.A9 Agreement on the Exchange of Data Between Outsourcing Partners (S)
is blocked by DER.1.A2 Compliance with Legal Conditions When Analysing Log Data (B)
is blocked by APP.1.4.A1 Requirements Analysis for the Use of Apps [Process Owner] (B)
is blocked by APP.1.4.A5 Minimising and Checking App Authorisations [Process Owner] (B)
is blocked by APP.1.4.A8 Preventing Data Leaks (B)
is blocked by APP.1.4.A12 Secure App Removal (S)
is blocked by APP.2.1.A3 Setting Up Access Authorisations for Directory Services [Process Owner] (B)
is blocked by APP.2.1.A5 Secure Configuration and Configuration Changes in Directory Services (B)
is blocked by APP.2.1.A11 Setting Up Access to Directory Services (S)
is blocked by APP.2.1.A13 Protection of Communications with Directory Services (S)
is blocked by APP.2.2.A2 Planning of Active Directory Administration [Process Owner] (B)
is blocked by APP.2.2.A5 Hardening Active Directory (B)
is blocked by APP.2.2.A6 Maintaining the Operational Continuity of Active Directory (B)
is blocked by APP.2.2.A7 Implementation of Secure Administration Methods for Active Directory [Process Owner] (B)
is blocked by APP.2.3.A11 Restriction of the OpenLDAP Runtime Environment (S)
is blocked by SYS.1.2.2.A2 Secure Installation of Windows Server 2012 (B)
is blocked by SYS.1.2.2.A3 Secure Administration of Windows Server 2012 (B)
is blocked by SYS.1.2.2.A4 Secure Configuration of Windows Server 2012 (S)
is blocked by SYS.1.2.2.A5 Protection Against Malware on Windows Server 2012 (S)
is blocked by SYS.1.2.2.A6 Secure Authentication and Authorisation in Windows Server 2012 (S)
is blocked by SYS.1.2.2.A14 Shutting Down Encrypted Servers and Virtual Machines (H)
is blocked by SYS.3.2.2.A12 Protection of the MDM Operating Environment (S)
is blocked by SYS.3.2.2.A21 Administration of Certificates (S)
is blocked by SYS.3.2.2.A22 Remote Deletion and Decommissioning of End Devices (S)
is blocked by SYS.3.2.3.A1 Strategy for Using iOS Devices (B)
is blocked by SYS.3.2.3.A2 Planning the Use of Cloud Services (B)
is blocked by SYS.3.2.3.A7 Preventing Unauthorised Deletion of Configuration Profiles (B)
is blocked by SYS.3.2.3.A13 Using the “iOS Restrictions” Configuration Option (S)
is blocked by SYS.3.2.3.A26 No Connections to Host Systems (H)
is blocked by SYS.3.2.4.A3 Using Multi-User and Guest Mode (S)
is blocked by SYS.4.4.A2 Authentication (B)
is blocked by SYS.4.4.A5 Restriction of Network Access (B)
is blocked by SYS.4.4.A6 Integration of IoT Devices into Organisation Security Policies (S)
is blocked by SYS.4.4.A7 Planning the Use of IoT Devices (S)
is blocked by SYS.4.4.A10 Secure Installation and Configuration of IoT Devices (S)
is blocked by SYS.4.4.A11 Using Encrypted Data Transmission (S)
is blocked by SYS.4.4.A13 Deactivation and Uninstallation of Unnecessary Components (S)
is blocked by SYS.4.4.A15 Restrictive Granting of Access Rights (S)
is blocked by SYS.4.4.A19 Protection of Administration Interfaces (S)
is blocked by NET.3.1.A4 Protection of Administration Interfaces (B)
is blocked by NET.3.1.A5 Protection Against Fragmentation Attacks (B)
is blocked by NET.3.1.A11 Procurement of a Router or Switch (S)
is blocked by NET.3.1.A12 Drawing Up a Configuration Checklist for Routers and Switches (S)
is blocked by NET.3.1.A13 Administration Using a Separate Management Network (S)
is blocked by NET.3.1.A23 Audits and Penetration Tests (S)
is blocked by NET.3.1.A24 Use of Network Access Controls (H)