The “Implementation Plan for the Federal Administration” (UP Bund 2017) is the defined guideline for information security in the Federal Administration of Germany. It establishes a form of cross-departmental information security management for federal agencies in which each agency is responsible for creating and implementing its own specific security concept. In addition to federal agencies, other organisations may be obliged by law, contract, or other regulations to implement UP Bund 2017. UP Bund 2017 explicitly stipulates that the BSI standards on information security and IT-Grundschutz, as well as the procedure for standard protection described therein, must be implemented as a minimum requirement. Furthermore, UP Bund 2017 stipulates that all organisations that are obliged to implement the plan must regularly review the status of their own ISMS (e.g. by means of a suitable IS audit) and apply the “Guideline for Information Security Audits Based on IT-Grundschutz”. Any organisation that fails to do so will find itself in breach of the provisions of UP Bund.