If an IT operation department has not clearly regulated administrative responsibilities in areas like planning, installation, documentation, or monitoring, it will not be possible to carry out security-relevant tasks from these areas systematically (or at all). This is also the case if the regulations are not known and understood by the employees involved. Some typical examples involve the unclear delimitation of responsibilities between IT and telecommunications technology, between office IT and production systems, or between application and platform operations.