New version: IT-Grundschutz Compendium Edition 2022 (2022-4cd3f72618) – 2334 new, 64 changed, 0 removed, 1 assignments, 7136 links
- Document: IT-Grundschutz Compendium Edition 2022 (https://www.bsi.bund.de/SharedDocs/Downloads/EN/BSI/Grundschutz/International/bsi_it_gs_comp_2022.pdf?__blob=publicationFile&v=2)
- Version: 2022-4cd3f72618
- Project: BSI
- Import: #2415, 24.10.2026 10:18, bsi
The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes).
Taken over directly (additional fields, HTML of an unchanged text): 91 issues.
Review: 0 open, 9535 applied, 0 rejected.
New sections (2334)
- ORP.4.A24 Dual Control for Administrative Activities [IT Operation Department] (H) [applied]
ITGC (1.2.2022) ORP.4.A24 - ORP.5 Compliance Management [applied]
ITGC (1.2.2022) ORP.5 - ORP.5.G1. Violations of Legal Provisions [applied]
BSI ITGC (01.02.2022) ORP.5.G1. - ORP.5.G2. Improper Forwarding of Information [applied]
BSI ITGC (01.02.2022) ORP.5.G2. - ORP.5.G3. Inadequate Checking of the Identity of Communication Partners [applied]
BSI ITGC (01.02.2022) ORP.5.G3. - ORP.5.G4. Accidental Sharing of Internal Information [applied]
BSI ITGC (01.02.2022) ORP.5.G4. - ORP.5.A1 Identification of Framework Conditions [Central Administration, Top Management] (B) [applied]
ITGC (1.2.2022) ORP.5.A1 - ORP.5.A2 Compliance with Framework Conditions [Supervisor, Central Administration, Top Management] (B) [applied]
ITGC (1.2.2022) ORP.5.A2 - ORP.5.A4 Design and Organisation of Compliance Management [Top Management] (S) [applied]
ITGC (1.2.2022) ORP.5.A4 - ORP.5.A5 Granting Exceptions [Supervisor, Chief Information Security Officer (CISO)] (S) [applied]
ITGC (1.2.2022) ORP.5.A5 - ORP.5.A8 Regular Reviews of Compliance Management (S) [applied]
ITGC (1.2.2022) ORP.5.A8 - CON.1 Crypto Concept [applied]
ITGC (1.2.2022) CON.1 - CON.1.G1. Inadequate Key Management for Encryption [applied]
BSI ITGC (01.02.2022) CON.1.G1. - CON.1.G2. Violation of Legal Framework Conditions Regarding the Use of Cryptographic Methods [applied]
BSI ITGC (01.02.2022) CON.1.G2. - CON.1.G3. Loss of Data Confidentiality or Integrity Due to Misbehaviour [applied]
BSI ITGC (01.02.2022) CON.1.G3. - CON.1.G4. Software Vulnerabilities or Errors in Crypto Modules [applied]
BSI ITGC (01.02.2022) CON.1.G4. - CON.1.G5. Failure of a Crypto Module [applied]
BSI ITGC (01.02.2022) CON.1.G5. - CON.1.G6. Insecure Cryptographic Algorithms or Products [applied]
BSI ITGC (01.02.2022) CON.1.G6. - CON.1.G7. Errors in Encrypted Data or Cryptographic Keys [applied]
BSI ITGC (01.02.2022) CON.1.G7. - CON.1.G8. Unauthorised Use of a Crypto Module [applied]
BSI ITGC (01.02.2022) CON.1.G8. - CON.1.G9. Compromised Cryptographic Keys [applied]
BSI ITGC (01.02.2022) CON.1.G9. - CON.1.G10. Forged Certificates [applied]
BSI ITGC (01.02.2022) CON.1.G10. - CON.1.A1 Selecting Appropriate Cryptographic Methods [Process Owner] [applied]
ITGC (1.2.2022) CON.1.A1 - CON.1.A2 Backups When Using Cryptographic Methods [IT Operation Department] (B) [applied]
ITGC (1.2.2022) CON.1.A2 - CON.1.A3 Encryption of Communication Links (S) [applied]
ITGC (1.2.2022) CON.1.A3 - CON.1.A4 Appropriate Key Management (S) [applied]
ITGC (1.2.2022) CON.1.A4 - CON.1.A5 Secure Deletion and Destruction of Cryptographic Keys [IT Operation Department] (S) [applied]
ITGC (1.2.2022) CON.1.A5 - CON.1.A6 Identifying the Need for Cryptographic Methods and Products [IT Operation Department, Process Owner] (S) [applied]
ITGC (1.2.2022) CON.1.A6 - CON.1.A7 Drawing Up a Security Policy for the Use of Cryptographic Methods and Products (H) [applied]
ITGC (1.2.2022) CON.1.A7 - CON.1.A8 Determining the Factors That Influence Cryptographic Methods and Products (H) [applied]
ITGC (1.2.2022) CON.1.A8 - CON.1.A9 Selecting an Appropriate Cryptographic Product [IT Operation Department, Process Owner] (H) [applied]
ITGC (1.2.2022) CON.1.A9 - CON.1.A10 Developing a Crypto Concept (H) [applied]
ITGC (1.2.2022) CON.1.A10 - CON.1.A11 Secure Configuration of Crypto Modules [IT Operation Department] (H) [applied]
ITGC (1.2.2022) CON.1.A11 - CON.1.A12 Secure Separation of Roles When Using Crypto Modules [IT Operation Department] (H) [applied]
ITGC (1.2.2022) CON.1.A12 - CON.1.A13 Operating System Security Requirements When Using Crypto Modules (H) [applied]
ITGC (1.2.2022) CON.1.A13 - CON.1.A14 Training of Users and Administrators [Supervisor, Process Owner, IT Operation Department] (H) [applied]
ITGC (1.2.2022) CON.1.A14 - CON.1.A15 Reacting to the Practical Weakening of a Crypto Method (H) [applied]
ITGC (1.2.2022) CON.1.A15 - CON.1.A16 Physical Protection of Crypto Modules [IT Operation Department] (H) [applied]
ITGC (1.2.2022) CON.1.A16 - CON.1.A17 Emission Security [IT Operation Department] (H) [applied]
ITGC (1.2.2022) CON.1.A17 - CON.1.A18 Cryptographic Replacement Modules [IT Operation Department] (H) [applied]
ITGC (1.2.2022) CON.1.A18 - CON.2 Data Protection [applied]
ITGC (1.2.2022) CON.2 - CON.2.G1. Non-Compliance with Data Protection Laws or Use of an Incomplete Risk Model [applied]
BSI ITGC (01.02.2022) CON.2.G1. - CON.2.G2. Definition of Insufficient Protection Needs [applied]
BSI ITGC (01.02.2022) CON.2.G2. - CON.2.A1 Implementing the German Standard Data Protection Model (B) [applied]
ITGC (1.2.2022) CON.2.A1 - CON.3 Backup Concept [applied]
ITGC (1.2.2022) CON.3 - CON.3.G1. Lack of Backups [applied]
BSI ITGC (01.02.2022) CON.3.G1. - CON.3.G2. Lack of Recovery Tests [applied]
BSI ITGC (01.02.2022) CON.3.G2. - CON.3.G3. Unsuitable Storage of Backup Media [applied]
BSI ITGC (01.02.2022) CON.3.G3. - CON.3.G4. Inadequate Documentation [applied]
BSI ITGC (01.02.2022) CON.3.G4. - CON.3.G5. Non-Compliance with Statutory Regulations [applied]
BSI ITGC (01.02.2022) CON.3.G5. - CON.3.G6. Using Insecure Providers for Online Backups [applied]
BSI ITGC (01.02.2022) CON.3.G6. - CON.3.G7. Insufficient Storage Capacity [applied]
BSI ITGC (01.02.2022) CON.3.G7. - CON.3.G8. Inadequate Backup Concept [applied]
BSI ITGC (01.02.2022) CON.3.G8. - CON.3.G9. Insufficient Data Backup Speed [applied]
BSI ITGC (01.02.2022) CON.3.G9. - CON.3.G10. Ransomware [applied]
BSI ITGC (01.02.2022) CON.3.G10. - CON.3.A1 Determining the Factors That Influence Backups [Process Owner, IT Operation Department] (B) [applied]
ITGC (1.2.2022) CON.3.A1 - CON.3.A2 Establishment of Backup Procedures [Process Owner, IT Operation Department] (B) [applied]
ITGC (1.2.2022) CON.3.A2 - CON.3.A4 Creating Backup Plans [IT Operation Department] (B) [applied]
ITGC (1.2.2022) CON.3.A4 - CON.3.A5 Regular Backups [IT Operation Department] (B) [applied]
ITGC (1.2.2022) CON.3.A5 - CON.3.A12 Secure Storage of Backup Media [IT Operation Department] (B) [applied]
ITGC (1.2.2022) CON.3.A12 - CON.3.A14 Protection of Backups [IT Operation Department] (B) [applied]
ITGC (1.2.2022) CON.3.A14 - CON.3.A15 Regular Backup Testing [IT Operation Department] (B) [applied]
ITGC (1.2.2022) CON.3.A15 - CON.3.A6 Developing a Backup Concept [Process Owner, IT Operation Department] (S) [applied]
ITGC (1.2.2022) CON.3.A6 - CON.3.A7 Procuring a Suitable Backup System [IT Operation Department] (S) [applied]
ITGC (1.2.2022) CON.3.A7 - CON.3.A9 Prerequisites of Online Backups [IT Operation Department] (S) [applied]
ITGC (1.2.2022) CON.3.A9 - CON.3.A13 Using Cryptographic Methods for Backups [IT Operation Department] (H) [applied]
ITGC (1.2.2022) CON.3.A13 - CON.6 Deleting and Destroying Data and Devices [applied]
ITGC (1.2.2022) CON.6 - CON.6.G1. Non-Existent or Insufficiently Documented Regulations for Deletion and Destruction [applied]
BSI ITGC (01.02.2022) CON.6.G1. - CON.6.G2. Loss of Confidentiality due to Residual Information on Storage Media [applied]
BSI ITGC (01.02.2022) CON.6.G2. - CON.6.G3. Inappropriate Involvement of External Service Providers in the Deletion and Destruction Process [applied]
BSI ITGC (01.02.2022) CON.6.G3. - CON.6.G4. Inappropriate Handling of Defective Storage Media or IT Devices [applied]
BSI ITGC (01.02.2022) CON.6.G4. - CON.6.A1 Regulations for Deleting or Destroying Information [Central Administration, Process Owner, Data Protection Officer, IT Operation Department]… [applied]
ITGC (1.2.2022) CON.6.A1 - CON.6.A2 Proper Deletion and Destruction of Sensitive Resources and Information (B) [applied]
ITGC (1.2.2022) CON.6.A2 - CON.6.A11 Deletion and Destruction of Storage Media by External Service Providers (B) [applied]
ITGC (1.2.2022) CON.6.A11 - CON.6.A12 Minimum Requirements for Deletion and Destruction Procedures (B) [applied]
ITGC (1.2.2022) CON.6.A12 - CON.6.A4 Selecting Suitable Methods for Deleting or Destroying Storage Media (S) [applied]
ITGC (1.2.2022) CON.6.A4 - CON.6.A8 Creating a Policy for Deleting and Destroying Information [Employee, IT Operation Department, Data Protection Officer] (S) [applied]
ITGC (1.2.2022) CON.6.A8 - CON.6.A13 Destruction of Defective Digital Storage Media (S) [applied]
ITGC (1.2.2022) CON.6.A13 - CON.6.A14 Destruction of Storage Media at Increased Security Levels (H) [applied]
ITGC (1.2.2022) CON.6.A14 - CON.7 Information Security on Trips Abroad [applied]
ITGC (1.2.2022) CON.7 - CON.7.G1. Eavesdropping and Spying on Information/Industrial Espionage [applied]
BSI ITGC (01.02.2022) CON.7.G1. - CON.7.G2. Disclosure and Misuse of Sensitive Information (Electronic and Physical) [applied]
BSI ITGC (01.02.2022) CON.7.G2. - CON.7.G3. Use of False Identities [applied]
BSI ITGC (01.02.2022) CON.7.G3. - CON.7.G4. Lack of Security Awareness and Carelessness in Handling Information [applied]
BSI ITGC (01.02.2022) CON.7.G4. - CON.7.G5. Violation of Local Laws or Regulations [applied]
BSI ITGC (01.02.2022) CON.7.G5. - CON.7.G6. Coercion, Extortion, Hijacking, and Corruption [applied]
BSI ITGC (01.02.2022) CON.7.G6. - CON.7.G7. Information from Unreliable Sources [applied]
BSI ITGC (01.02.2022) CON.7.G7. - CON.7.G8. Theft or Loss of Devices, Storage Media, and Documents [applied]
BSI ITGC (01.02.2022) CON.7.G8. - CON.7.A1 Security Policy for Information Security on Trips Abroad [applied]
ITGC (1.2.2022) CON.7.A1 - CON.7.A2 Raising Employee Awareness of Information Security When Travelling Abroad (B) [applied]
ITGC (1.2.2022) CON.7.A2 - CON.7.A3 Identification of Country-Specific Regulations, Travel Conditions and Environmental Conditions [Human Resource Department] [applied]
ITGC (1.2.2022) CON.7.A3 - CON.7.A4 Use of Privacy Screens [User] (B) [applied]
ITGC (1.2.2022) CON.7.A4 - CON.7.A5 Use of Screen/Code Locking [User] (B) [applied]
ITGC (1.2.2022) CON.7.A5 - CON.7.A6 Prompt Reporting of a Loss [User] [applied]
ITGC (1.2.2022) CON.7.A6 - CON.7.A7 Secure Remote Access to an Organisation's Network [IT Operation Department, User] (B) [applied]
ITGC (1.2.2022) CON.7.A7 - CON.7.A8 Secure Use of Public WLANs [User] (B) [applied]
ITGC (1.2.2022) CON.7.A8 - CON.7.A9 Secure Handling of Mobile Storage Media [User] (B) [applied]
ITGC (1.2.2022) CON.7.A9 - CON.7.A10 Encryption of Portable IT Systems and Storage Media [User, IT Operation Department] (B) [applied]
ITGC (1.2.2022) CON.7.A10 - CON.7.A12 Secure Destruction of Sensitive Materials and Documents [User] (B) [applied]
ITGC (1.2.2022) CON.7.A12 - CON.7.A11 Use of Anti-Theft Devices [User] (S) [applied]
ITGC (1.2.2022) CON.7.A11 - CON.7.A13 Transporting Necessary Data and Storage Media [User] (S) [applied]
ITGC (1.2.2022) CON.7.A13 - CON.7.A14 Cryptographically Secured E-Mail Communication [User, IT Operation Department] (S) [applied]
ITGC (1.2.2022) CON.7.A14 - CON.7.A15 Emission Security for Portable IT Systems (H) [applied]
ITGC (1.2.2022) CON.7.A15 - CON.7.A16 Protecting Integrity Using Checksums or Digital Signatures [User] (H) [applied]
ITGC (1.2.2022) CON.7.A16 - CON.7.A17 Use of Dedicated Travel Hardware [IT Operation Department] (H) [applied]
ITGC (1.2.2022) CON.7.A17 - CON.7.A18 Restricted Authorisations on Trips Abroad [IT Operation Department] (H) [applied]
ITGC (1.2.2022) CON.7.A18 - CON.8 Software Development [applied]
ITGC (1.2.2022) CON.8 - CON.8.G1. Selection of an Unsuitable Process Model [applied]
BSI ITGC (01.02.2022) CON.8.G1. - CON.8.G2. Selection of an Unsuitable Development Environment [applied]
BSI ITGC (01.02.2022) CON.8.G2. - CON.8.G3. Inadequate Quality Assurance in the Development Process [applied]
BSI ITGC (01.02.2022) CON.8.G3. - CON.8.G4. Inadequate Documentation [applied]
BSI ITGC (01.02.2022) CON.8.G4. - CON.8.G5. Inadequately Secured Use of Development Environments [applied]
BSI ITGC (01.02.2022) CON.8.G5. - CON.8.G6. Software Design Errors [applied]
BSI ITGC (01.02.2022) CON.8.G6. - CON.8.G7. Inadequate Testing and Approval Procedures [applied]
BSI ITGC (01.02.2022) CON.8.G7. - CON.8.G8. Software Testing with Production Data [applied]
BSI ITGC (01.02.2022) CON.8.G8. - CON.8.A2 Selection of a Process Model (B) [applied]
ITGC (1.2.2022) CON.8.A2 - CON.8.A3 Selection of a Development Environment (B) [applied]
ITGC (1.2.2022) CON.8.A3 - CON.8.A5 Secure System Design (B) [applied]
ITGC (1.2.2022) CON.8.A5 - CON.8.A6 Use of External Libraries from Trusted Sources (B) [applied]
ITGC (1.2.2022) CON.8.A6 - CON.8.A7 Conducting Software Tests During Development [Tester, Developer] (B) [applied]
ITGC (1.2.2022) CON.8.A7 - CON.8.A8 Provision of Patches, Updates, and Changes [Developer] (B) [applied]
ITGC (1.2.2022) CON.8.A8 - CON.8.A10 Source Code Version Management [Developer] (B) [applied]
ITGC (1.2.2022) CON.8.A10 - CON.8.A20 Checking External Components (B) [applied]
ITGC (1.2.2022) CON.8.A20 - CON.8.A1 Definition of Roles and Responsibilities [Central Administration] (S) [applied]
ITGC (1.2.2022) CON.8.A1 - CON.8.A11 Drawing Up a Policy for Software Development (S) [applied]
ITGC (1.2.2022) CON.8.A11 - CON.8.A12 Detailed Documentation (S) [applied]
ITGC (1.2.2022) CON.8.A12 - CON.8.A14 Training Development Teams on Information Security (S) [applied]
ITGC (1.2.2022) CON.8.A14 - CON.8.A16 Appropriate Control of Software Development (S) [applied]
ITGC (1.2.2022) CON.8.A16 - CON.8.A21 Threat Modelling (S) [applied]
ITGC (1.2.2022) CON.8.A21 - CON.8.A22 Secure Software Design (S) [applied]
ITGC (1.2.2022) CON.8.A22 - CON.8.A17 Selection of Trusted Development Tools (H) [applied]
ITGC (1.2.2022) CON.8.A17 - CON.8.A18 Periodic Security Audits of the Development Environment (H) [applied]
ITGC (1.2.2022) CON.8.A18 - CON.8.A19 Regular Integrity Audits of the Development Environment [IT Operation Department] (H) [applied]
ITGC (1.2.2022) CON.8.A19 - CON.9 Information Exchange [applied]
ITGC (1.2.2022) CON.9 - CON.9.G1. Delayed Availability of Information [applied]
BSI ITGC (01.02.2022) CON.9.G1. - CON.9.G2. Unregulated Forwarding of information [applied]
BSI ITGC (01.02.2022) CON.9.G2. - CON.9.G3. Sharing False or Internal Information [applied]
BSI ITGC (01.02.2022) CON.9.G3. - CON.9.G4. Unauthorised Copying and Modification of Information [applied]
BSI ITGC (01.02.2022) CON.9.G4. - CON.9.G5. Inadequate Application of Encryption Procedures [applied]
BSI ITGC (01.02.2022) CON.9.G5. - CON.9.A1 Definition of Authorised Recipients [Central Administration, Users] (B) [applied]
ITGC (1.2.2022) CON.9.A1 - CON.9.A2 Regulating the Exchange of Information [Central Administration, User] (B) [applied]
ITGC (1.2.2022) CON.9.A2 - CON.9.A3 Instruction of Personnel on Exchanges of Information [Process Owner] (B) [applied]
ITGC (1.2.2022) CON.9.A3 - CON.9.A4 Agreements on Exchanging Information with External Parties [Central Administration] (S) [applied]
ITGC (1.2.2022) CON.9.A4 - CON.9.A5 Removal of Residual Information Prior to Sharing [User] (S) [applied]
ITGC (1.2.2022) CON.9.A5 - CON.9.A6 Compatibility Checks on Sender and Recipient Systems (S) [applied]
ITGC (1.2.2022) CON.9.A6 - CON.9.A7 Backup Copies of Transferred Data [User] (S) [applied]
ITGC (1.2.2022) CON.9.A7 - CON.9.A8 Encryption and Digital Signatures (S) [applied]
ITGC (1.2.2022) CON.9.A8 - CON.9.A9 Confidentiality Agreements [Central Administration, User] (H) [applied]
ITGC (1.2.2022) CON.9.A9 - CON.10 Development of Web Applications [applied]
ITGC (1.2.2022) CON.10 - CON.10.G1. Bypassing Authorisations in Web Applications [applied]
BSI ITGC (01.02.2022) CON.10.G1. - CON.10.G2. Insufficient Input Validation and Output Encoding [applied]
BSI ITGC (01.02.2022) CON.10.G2. - CON.10.G3. Insufficient Error Handling by Web Applications [applied]
BSI ITGC (01.02.2022) CON.10.G3. - CON.10.G4. Insufficient Logging of Security-Relevant Events [applied]
BSI ITGC (01.02.2022) CON.10.G4. - CON.10.G5. Disclosure of Security-Relevant Information Through Web Applications [applied]
BSI ITGC (01.02.2022) CON.10.G5. - CON.10.G6. Misuse of a Web Application Due to Automated Use [applied]
BSI ITGC (01.02.2022) CON.10.G6. - CON.10.G7. Inadequate Session Management in Web Applications [applied]
BSI ITGC (01.02.2022) CON.10.G7. - CON.10.A1 Authentication for Web Applications (B) [applied]
ITGC (1.2.2022) CON.10.A1 - CON.10.A2 Access Control for Web Applications (B) [applied]
ITGC (1.2.2022) CON.10.A2 - CON.10.A3 Secure Session Management (B) [applied]
ITGC (1.2.2022) CON.10.A3 - CON.10.A4 Controlled Integration of Content in Web Applications (B) [applied]
ITGC (1.2.2022) CON.10.A4 - CON.10.A5 Upload Functions (B) [applied]
ITGC (1.2.2022) CON.10.A5 - CON.10.A6 Protection Against Unauthorised Automated Use of Web Applications (B) [applied]
ITGC (1.2.2022) CON.10.A6 - CON.10.A7 Protection of Confidential Data (B) [applied]
ITGC (1.2.2022) CON.10.A7 - CON.10.A8 Comprehensive Input Validation and Output Encoding (B) [applied]
ITGC (1.2.2022) CON.10.A8 - CON.10.A9 Protection Against SQL Injections (B) [applied]
ITGC (1.2.2022) CON.10.A9 - CON.10.A10 Restrictive Disclosure of Security-Related Information (B) [applied]
ITGC (1.2.2022) CON.10.A10 - CON.10.A11 Software Architecture of a Web Application (S) [applied]
ITGC (1.2.2022) CON.10.A11 - CON.10.A12 Verification of Essential Changes (S) [applied]
ITGC (1.2.2022) CON.10.A12 - CON.10.A13 Error Handling (S) [applied]
ITGC (1.2.2022) CON.10.A13 - CON.10.A14 Secure HTTP Configuration of Web Applications (S) [applied]
ITGC (1.2.2022) CON.10.A14 - CON.10.A15 Prevention of Cross-Site Request Forgery (S) [applied]
ITGC (1.2.2022) CON.10.A15 - CON.10.A16 Multi-Factor Authentication (S) [applied]
ITGC (1.2.2022) CON.10.A16 - CON.10.A17 Preventing Resources from Being Blocked (H) [applied]
ITGC (1.2.2022) CON.10.A17 - CON.10.A18 Cryptographic Protection of Confidential Data (H) [applied]
ITGC (1.2.2022) CON.10.A18 - OPS.1.1.2 Proper IT Administration [applied]
ITGC (1.2.2022) OPS.1.1.2 - OPS.1.1.2.G1. Failures Caused by Unspecified Responsibilities [applied]
BSI ITGC (01.02.2022) OPS.1.1.2.G1. - OPS.1.1.2.G2. Shortage of Personnel with Core Competencies [applied]
BSI ITGC (01.02.2022) OPS.1.1.2.G2. - OPS.1.1.2.G3. Misuse of Administrative Authorisations [applied]
BSI ITGC (01.02.2022) OPS.1.1.2.G3. - OPS.1.1.2.G4. Inadequate Consideration of Administrative Tasks [applied]
BSI ITGC (01.02.2022) OPS.1.1.2.G4. - OPS.1.1.2.G5. Operational Disruptions [applied]
BSI ITGC (01.02.2022) OPS.1.1.2.G5. - OPS.1.1.2.G6. Lack of Options for Investigating Incidents [applied]
BSI ITGC (01.02.2022) OPS.1.1.2.G6. - OPS.1.1.2.A2 Deputising Rules and Contingency Planning (B) [applied]
ITGC (1.2.2022) OPS.1.1.2.A2 - OPS.1.1.2.A3 Controlled Hiring of IT Administrators (B) [applied]
ITGC (1.2.2022) OPS.1.1.2.A3 - OPS.1.1.2.A4 Termination of IT Administration Duties [Human Resources Department] (B) [applied]
ITGC (1.2.2022) OPS.1.1.2.A4 - OPS.1.1.2.A5 Verifying Administrative Tasks (B) [applied]
ITGC (1.2.2022) OPS.1.1.2.A5 - OPS.1.1.2.A6 Protecting Administrative Tasks (B) [applied]
ITGC (1.2.2022) OPS.1.1.2.A6 - OPS.1.1.2.A7 Regulation of IT Administration Tasks (S) [applied]
ITGC (1.2.2022) OPS.1.1.2.A7 - OPS.1.1.2.A8 Administration of Specialised Applications (S) [applied]
ITGC (1.2.2022) OPS.1.1.2.A8 - OPS.1.1.2.A9 Sufficient Resources for the IT Operation Department (S) [applied]
ITGC (1.2.2022) OPS.1.1.2.A9 - OPS.1.1.2.A10 Further Education and Information (S) [applied]
ITGC (1.2.2022) OPS.1.1.2.A10 - OPS.1.1.2.A11 Documentation of IT Administration Tasks (S) [applied]
ITGC (1.2.2022) OPS.1.1.2.A11 - OPS.1.1.2.A12 Provisions for Maintenance and Repairs (S) [applied]
ITGC (1.2.2022) OPS.1.1.2.A12 - OPS.1.1.2.A20 Administration and Commissioning of Devices (S) [applied]
ITGC (1.2.2022) OPS.1.1.2.A20 - OPS.1.1.2.A14 Security Vetting of Administrators [Human Resources Department] (H) [applied]
ITGC (1.2.2022) OPS.1.1.2.A14 - OPS.1.1.2.A15 Division of Administrative Activities (H) [applied]
ITGC (1.2.2022) OPS.1.1.2.A15 - OPS.1.1.2.A16 Access Restrictions for Administrative Access (H) [applied]
ITGC (1.2.2022) OPS.1.1.2.A16 - OPS.1.1.2.A17 Dual Control in IT Administration (H) [applied]
ITGC (1.2.2022) OPS.1.1.2.A17 - OPS.1.1.2.A18 Consistent Logging of Administrative Activities (H) [applied]
ITGC (1.2.2022) OPS.1.1.2.A18 - OPS.1.1.2.A19 Consideration of High-Availability Requirements (H) [applied]
ITGC (1.2.2022) OPS.1.1.2.A19 - OPS.1.1.3 Patch and Change Management [applied]
ITGC (1.2.2022) OPS.1.1.3 - … and 2134 more
Changed sections (64)
- G 0.1 Fire – text [applied]
BSI ITGC (01.02.2022) G 0.1 - G 0.2 Unfavourable Climatic Conditions – text [applied]
BSI ITGC (01.02.2022) G 0.2 - G 0.3 Water – text [applied]
BSI ITGC (01.02.2022) G 0.3 - G 0.4 Pollution, Dust, Corrosion – text [applied]
BSI ITGC (01.02.2022) G 0.4 - G 0.5 Natural Disasters – text [applied]
BSI ITGC (01.02.2022) G 0.5 - G 0.6 Catastrophes in the Vicinity – text [applied]
BSI ITGC (01.02.2022) G 0.6 - G 0.7 Major Events in the Vicinity – text [applied]
BSI ITGC (01.02.2022) G 0.7 - G 0.8 Failure or Disruption of the Power Supply – text [applied]
BSI ITGC (01.02.2022) G 0.8 - G 0.9 Failure or Disruption of Communication Networks – text [applied]
BSI ITGC (01.02.2022) G 0.9 - G 0.10 Failure or Disruption of Supply Networks – text [applied]
BSI ITGC (01.02.2022) G 0.10 - G 0.11 Failure or Disruption of Service Providers – text [applied]
BSI ITGC (01.02.2022) G 0.11 - G 0.14 Interception of Information / Espionage – text [applied]
BSI ITGC (01.02.2022) G 0.14 - G 0.15 Eavesdropping – text [applied]
BSI ITGC (01.02.2022) G 0.15 - G 0.16 Theft of Devices, Storage Media and Documents – text [applied]
BSI ITGC (01.02.2022) G 0.16 - G 0.17 Loss of Devices, Storage Media and Documents – text [applied]
BSI ITGC (01.02.2022) G 0.17 - G 0.18 Poor Planning or Lack of Adaptation – text [applied]
BSI ITGC (01.02.2022) G 0.18 - G 0.19 Disclosure of Sensitive Information – text [applied]
BSI ITGC (01.02.2022) G 0.19 - G 0.20 Information or Products from an Unreliable Source – text [applied]
BSI ITGC (01.02.2022) G 0.20 - G 0.21 Manipulation with Hardware or Software – text [applied]
BSI ITGC (01.02.2022) G 0.21 - G 0.22 Manipulation of Information – text [applied]
BSI ITGC (01.02.2022) G 0.22 - G 0.23 Unauthorised Access to IT Systems – text [applied]
BSI ITGC (01.02.2022) G 0.23 - G 0.24 Destruction of Devices or Storage Media – text [applied]
BSI ITGC (01.02.2022) G 0.24 - G 0.25 Failure of Devices or Systems – text [applied]
BSI ITGC (01.02.2022) G 0.25 - G 0.26 Malfunction of Devices or Systems – text [applied]
BSI ITGC (01.02.2022) G 0.26 - G 0.27 Lack of Resources – text [applied]
BSI ITGC (01.02.2022) G 0.27 - G 0.28 Software Vulnerabilities or Errors – text [applied]
BSI ITGC (01.02.2022) G 0.28 - G 0.29 Violations of Laws or Regulations – text [applied]
BSI ITGC (01.02.2022) G 0.29 - G 0.30 Unauthorised Use or Administration of Devices and Systems – text [applied]
BSI ITGC (01.02.2022) G 0.30 - G 0.32 Misuse of Authorisation – text [applied]
BSI ITGC (01.02.2022) G 0.32 - G 0.33 Shortage of Personnel – text [applied]
BSI ITGC (01.02.2022) G 0.33 - G 0.34 Assault – text [applied]
BSI ITGC (01.02.2022) G 0.34 - G 0.36 Identity theft – text [applied]
BSI ITGC (01.02.2022) G 0.36 - G 0.37 Repudiation of Actions – text [applied]
BSI ITGC (01.02.2022) G 0.37 - G 0.38 Misuse of Personal Information – text [applied]
BSI ITGC (01.02.2022) G 0.38 - G 0.39 Malware – text [applied]
BSI ITGC (01.02.2022) G 0.39 - G 0.40 Denial of Service – text [applied]
BSI ITGC (01.02.2022) G 0.40 - G 0.41 Sabotage – text [applied]
BSI ITGC (01.02.2022) G 0.41 - G 0.42 Social Engineering – text [applied]
BSI ITGC (01.02.2022) G 0.42 - G 0.43 Attack with Specially Crafted Messages – text [applied]
BSI ITGC (01.02.2022) G 0.43 - G 0.44 Unauthorised Entry to Premises – text [applied]
BSI ITGC (01.02.2022) G 0.44 - G 0.45 Data Loss – text [applied]
BSI ITGC (01.02.2022) G 0.45 - G 0.46 Loss of Integrity of Sensitive Information – text [applied]
BSI ITGC (01.02.2022) G 0.46 - G 0.47 Harmful Side Effects of IT-Supported Attacks – title, text (before: G 0.47 Harmful Side Effects of IT_x0002_Supported Attack) [applied]
BSI ITGC (01.02.2022) G 0.47 - ISMS.1 Security Management – text [applied]
ITGC (1.2.2022) ISMS.1 - ISMS.1.G9. Uneconomical Use of Resources due to Inadequate Security Management – text [applied]
BSI ITGC (01.02.2022) ISMS.1.G9. - ORP.1 Organisation – text [applied]
ITGC (1.2.2022) ORP.1 - ORP.1.G2. Non-Compliance with Regulations – text [applied]
BSI ITGC (01.02.2022) ORP.1.G2. - ORP.1.G3. Inadequate or Incompatible Resources – text [applied]
BSI ITGC (01.02.2022) ORP.1.G3. - ORP.1.G4. Threats from Outside the Organisation – text [applied]
BSI ITGC (01.02.2022) ORP.1.G4. - ORP.1.A16 Policy for Secure IT Use [User] (S) – text [applied]
ITGC (1.2.2022) ORP.1.A16 - ORP.2 Personnel – text [applied]
ITGC (1.2.2022) ORP.2 - ORP.3 Awareness and Training in Information Security – text [applied]
ITGC (1.2.2022) ORP.3 - ORP.3.G3. Ineffective Awareness and Training Activities – text [applied]
BSI ITGC (01.02.2022) ORP.3.G3. - ORP.4 Identity and Access Management – text [applied]
ITGC (1.2.2022) ORP.4 - ORP.4.A22 Regulating Password Quality [IT Operation Department] (B) – title, text (before: ORP.4.A24 Dual Control for Administrative Activities [IT Operation Department] (H)) [applied]
ITGC (1.2.2022) ORP.4.A22 - ORP.4.A15 Approach and Design of Identity and Access Management Processes [IT Operation Department] (S) – text [applied]
ITGC (1.2.2022) ORP.4.A15 - Concepts and Procedures – title (before: concepts and methodologies) [applied]
ITGC (1.2.2022) CON - Operations – title (before: operational) [applied]
ITGC (1.2.2022) OPS - Detection and Response – title (before: Detect and Response) [applied]
ITGC (1.2.2022) DER - Applications – title (before: Application) [applied]
ITGC (1.2.2022) APP - IT Systems – title (before: Systems) [applied]
ITGC (1.2.2022) SYS - Industrial IT – title (before: Individual) [applied]
ITGC (1.2.2022) IND - Networks and Communication – title (before: Network) [applied]
ITGC (1.2.2022) NET - Infrastructure – title (before: Infrastrucuture) [applied]
ITGC (1.2.2022) INF
Labels (1)
- Applicable: Germany [applied]
New links (7136)
- Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ISMS.1.A1 - Blocks → G 0.27 Lack of Resources [applied]
ITGC (1.2.2022) ISMS.1.A1 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ISMS.1.A2 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ISMS.1.A3 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ISMS.1.A4 - Blocks → G 0.27 Lack of Resources [applied]
ITGC (1.2.2022) ISMS.1.A4 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ISMS.1.A5 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ISMS.1.A6 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ISMS.1.A7 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ISMS.1.A8 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ISMS.1.A8 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ISMS.1.A9 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ISMS.1.A10 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ISMS.1.A11 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ISMS.1.A11 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ISMS.1.A12 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ISMS.1.A13 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ISMS.1.A15 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ISMS.1.A15 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ISMS.1.A16 - Blocks → G 0.27 Lack of Resources [applied]
ITGC (1.2.2022) ISMS.1.A16 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ISMS.1.A17 - Blocks → G 0.14 Interception of Information / Espionage [applied]
ITGC (1.2.2022) ORP.1.A1 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ORP.1.A1 - Blocks → G 0.19 Disclosure of Sensitive Information [applied]
ITGC (1.2.2022) ORP.1.A1 - Blocks → G 0.22 Manipulation of Information [applied]
ITGC (1.2.2022) ORP.1.A1 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.1.A1 - Blocks → G 0.38 Misuse of Personal Information [applied]
ITGC (1.2.2022) ORP.1.A1 - Blocks → G 0.46 Loss of Integrity of Sensitive Information [applied]
ITGC (1.2.2022) ORP.1.A1 - Blocks → G 0.14 Interception of Information / Espionage [applied]
ITGC (1.2.2022) ORP.1.A2 - Blocks → G 0.16 Theft of Devices, Storage Media and Documents [applied]
ITGC (1.2.2022) ORP.1.A2 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ORP.1.A2 - Blocks → G 0.19 Disclosure of Sensitive Information [applied]
ITGC (1.2.2022) ORP.1.A2 - Blocks → G 0.22 Manipulation of Information [applied]
ITGC (1.2.2022) ORP.1.A2 - Blocks → G 0.25 Failure of Devices or Systems [applied]
ITGC (1.2.2022) ORP.1.A2 - Blocks → G 0.26 Malfunction of Devices or Systems [applied]
ITGC (1.2.2022) ORP.1.A2 - Blocks → G 0.27 Lack of Resources [applied]
ITGC (1.2.2022) ORP.1.A2 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.1.A2 - Blocks → G 0.38 Misuse of Personal Information [applied]
ITGC (1.2.2022) ORP.1.A2 - Blocks → G 0.46 Loss of Integrity of Sensitive Information [applied]
ITGC (1.2.2022) ORP.1.A2 - Blocks → G 0.14 Interception of Information / Espionage [applied]
ITGC (1.2.2022) ORP.1.A3 - Blocks → G 0.16 Theft of Devices, Storage Media and Documents [applied]
ITGC (1.2.2022) ORP.1.A3 - Blocks → G 0.19 Disclosure of Sensitive Information [applied]
ITGC (1.2.2022) ORP.1.A3 - Blocks → G 0.22 Manipulation of Information [applied]
ITGC (1.2.2022) ORP.1.A3 - Blocks → G 0.19 Disclosure of Sensitive Information [applied]
ITGC (1.2.2022) ORP.1.A4 - Blocks → G 0.22 Manipulation of Information [applied]
ITGC (1.2.2022) ORP.1.A4 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.1.A4 - Blocks → G 0.38 Misuse of Personal Information [applied]
ITGC (1.2.2022) ORP.1.A4 - Blocks → G 0.14 Interception of Information / Espionage [applied]
ITGC (1.2.2022) ORP.1.A15 - Blocks → G 0.19 Disclosure of Sensitive Information [applied]
ITGC (1.2.2022) ORP.1.A15 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.1.A15 - Blocks → G 0.38 Misuse of Personal Information [applied]
ITGC (1.2.2022) ORP.1.A15 - Blocks → G 0.45 Data Loss [applied]
ITGC (1.2.2022) ORP.1.A15 - Blocks → G 0.46 Loss of Integrity of Sensitive Information [applied]
ITGC (1.2.2022) ORP.1.A15 - Blocks → G 0.14 Interception of Information / Espionage [applied]
ITGC (1.2.2022) ORP.1.A8 - Blocks → G 0.16 Theft of Devices, Storage Media and Documents [applied]
ITGC (1.2.2022) ORP.1.A8 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ORP.1.A8 - Blocks → G 0.19 Disclosure of Sensitive Information [applied]
ITGC (1.2.2022) ORP.1.A8 - Blocks → G 0.27 Lack of Resources [applied]
ITGC (1.2.2022) ORP.1.A8 - Blocks → G 0.14 Interception of Information / Espionage [applied]
ITGC (1.2.2022) ORP.1.A13 - Blocks → G 0.16 Theft of Devices, Storage Media and Documents [applied]
ITGC (1.2.2022) ORP.1.A13 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ORP.1.A13 - Blocks → G 0.19 Disclosure of Sensitive Information [applied]
ITGC (1.2.2022) ORP.1.A13 - Blocks → G 0.22 Manipulation of Information [applied]
ITGC (1.2.2022) ORP.1.A13 - Blocks → G 0.25 Failure of Devices or Systems [applied]
ITGC (1.2.2022) ORP.1.A13 - Blocks → G 0.26 Malfunction of Devices or Systems [applied]
ITGC (1.2.2022) ORP.1.A13 - Blocks → G 0.38 Misuse of Personal Information [applied]
ITGC (1.2.2022) ORP.1.A13 - Blocks → G 0.46 Loss of Integrity of Sensitive Information [applied]
ITGC (1.2.2022) ORP.1.A13 - Blocks → G 0.14 Interception of Information / Espionage [applied]
ITGC (1.2.2022) ORP.1.A16 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ORP.1.A16 - Blocks → G 0.19 Disclosure of Sensitive Information [applied]
ITGC (1.2.2022) ORP.1.A16 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.1.A16 - Blocks → G 0.38 Misuse of Personal Information [applied]
ITGC (1.2.2022) ORP.1.A16 - Blocks → G 0.45 Data Loss [applied]
ITGC (1.2.2022) ORP.1.A16 - Blocks → G 0.46 Loss of Integrity of Sensitive Information [applied]
ITGC (1.2.2022) ORP.1.A16 - Blocks → G 0.14 Interception of Information / Espionage [applied]
ITGC (1.2.2022) ORP.2.A1 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.2.A1 - Blocks → G 0.38 Misuse of Personal Information [applied]
ITGC (1.2.2022) ORP.2.A1 - Blocks → G 0.42 Social Engineering [applied]
ITGC (1.2.2022) ORP.2.A1 - Blocks → G 0.45 Data Loss [applied]
ITGC (1.2.2022) ORP.2.A1 - Blocks → G 0.46 Loss of Integrity of Sensitive Information [applied]
ITGC (1.2.2022) ORP.2.A1 - Blocks → G 0.16 Theft of Devices, Storage Media and Documents [applied]
ITGC (1.2.2022) ORP.2.A2 - Blocks → G 0.36 Identity theft [applied]
ITGC (1.2.2022) ORP.2.A2 - Blocks → G 0.42 Social Engineering [applied]
ITGC (1.2.2022) ORP.2.A2 - Blocks → G 0.44 Unauthorised Entry to Premises [applied]
ITGC (1.2.2022) ORP.2.A2 - Blocks → G 0.45 Data Loss [applied]
ITGC (1.2.2022) ORP.2.A2 - Blocks → G 0.46 Loss of Integrity of Sensitive Information [applied]
ITGC (1.2.2022) ORP.2.A2 - Blocks → G 0.17 Loss of Devices, Storage Media and Documents [applied]
ITGC (1.2.2022) ORP.2.A3 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.2.A3 - Blocks → G 0.38 Misuse of Personal Information [applied]
ITGC (1.2.2022) ORP.2.A3 - Blocks → G 0.17 Loss of Devices, Storage Media and Documents [applied]
ITGC (1.2.2022) ORP.2.A4 - Blocks → G 0.44 Unauthorised Entry to Premises [applied]
ITGC (1.2.2022) ORP.2.A4 - Blocks → G 0.45 Data Loss [applied]
ITGC (1.2.2022) ORP.2.A4 - Blocks → G 0.46 Loss of Integrity of Sensitive Information [applied]
ITGC (1.2.2022) ORP.2.A4 - Blocks → G 0.14 Interception of Information / Espionage [applied]
ITGC (1.2.2022) ORP.2.A5 - Blocks → G 0.16 Theft of Devices, Storage Media and Documents [applied]
ITGC (1.2.2022) ORP.2.A5 - Blocks → G 0.17 Loss of Devices, Storage Media and Documents [applied]
ITGC (1.2.2022) ORP.2.A5 - Blocks → G 0.19 Disclosure of Sensitive Information [applied]
ITGC (1.2.2022) ORP.2.A5 - Blocks → G 0.22 Manipulation of Information [applied]
ITGC (1.2.2022) ORP.2.A5 - Blocks → G 0.27 Lack of Resources [applied]
ITGC (1.2.2022) ORP.2.A5 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.2.A5 - Blocks → G 0.32 Misuse of Authorisation [applied]
ITGC (1.2.2022) ORP.2.A5 - Blocks → G 0.33 Shortage of Personnel [applied]
ITGC (1.2.2022) ORP.2.A5 - Blocks → G 0.37 Repudiation of Actions [applied]
ITGC (1.2.2022) ORP.2.A5 - Blocks → G 0.38 Misuse of Personal Information [applied]
ITGC (1.2.2022) ORP.2.A5 - Blocks → G 0.44 Unauthorised Entry to Premises [applied]
ITGC (1.2.2022) ORP.2.A5 - Blocks → G 0.45 Data Loss [applied]
ITGC (1.2.2022) ORP.2.A5 - Blocks → G 0.46 Loss of Integrity of Sensitive Information [applied]
ITGC (1.2.2022) ORP.2.A5 - Blocks → G 0.19 Disclosure of Sensitive Information [applied]
ITGC (1.2.2022) ORP.2.A14 - Blocks → G 0.22 Manipulation of Information [applied]
ITGC (1.2.2022) ORP.2.A14 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.2.A14 - Blocks → G 0.41 Sabotage [applied]
ITGC (1.2.2022) ORP.2.A14 - Blocks → G 0.46 Loss of Integrity of Sensitive Information [applied]
ITGC (1.2.2022) ORP.2.A14 - Blocks → G 0.14 Interception of Information / Espionage [applied]
ITGC (1.2.2022) ORP.2.A15 - Blocks → G 0.19 Disclosure of Sensitive Information [applied]
ITGC (1.2.2022) ORP.2.A15 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.2.A15 - Blocks → G 0.32 Misuse of Authorisation [applied]
ITGC (1.2.2022) ORP.2.A15 - Blocks → G 0.38 Misuse of Personal Information [applied]
ITGC (1.2.2022) ORP.2.A15 - Blocks → G 0.42 Social Engineering [applied]
ITGC (1.2.2022) ORP.2.A15 - Blocks → G 0.46 Loss of Integrity of Sensitive Information [applied]
ITGC (1.2.2022) ORP.2.A15 - Blocks → G 0.16 Theft of Devices, Storage Media and Documents [applied]
ITGC (1.2.2022) ORP.2.A7 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.2.A7 - Blocks → G 0.42 Social Engineering [applied]
ITGC (1.2.2022) ORP.2.A7 - Blocks → G 0.45 Data Loss [applied]
ITGC (1.2.2022) ORP.2.A7 - Blocks → G 0.46 Loss of Integrity of Sensitive Information [applied]
ITGC (1.2.2022) ORP.2.A7 - Blocks → G 0.14 Interception of Information / Espionage [applied]
ITGC (1.2.2022) ORP.2.A13 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.2.A13 - Blocks → G 0.36 Identity theft [applied]
ITGC (1.2.2022) ORP.2.A13 - Blocks → G 0.38 Misuse of Personal Information [applied]
ITGC (1.2.2022) ORP.2.A13 - Blocks → G 0.14 Interception of Information / Espionage [applied]
ITGC (1.2.2022) ORP.3.A1 - Blocks → G 0.15 Eavesdropping [applied]
ITGC (1.2.2022) ORP.3.A1 - Blocks → G 0.19 Disclosure of Sensitive Information [applied]
ITGC (1.2.2022) ORP.3.A1 - Blocks → G 0.24 Destruction of Devices or Storage Media [applied]
ITGC (1.2.2022) ORP.3.A1 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.3.A1 - Blocks → G 0.30 Unauthorised Use or Administration of Devices and Systems [applied]
ITGC (1.2.2022) ORP.3.A1 - Blocks → G 0.31 Incorrect Use or Administration of Devices and Systems [applied]
ITGC (1.2.2022) ORP.3.A1 - Blocks → G 0.32 Misuse of Authorisation [applied]
ITGC (1.2.2022) ORP.3.A1 - Blocks → G 0.36 Identity theft [applied]
ITGC (1.2.2022) ORP.3.A1 - Blocks → G 0.37 Repudiation of Actions [applied]
ITGC (1.2.2022) ORP.3.A1 - Blocks → G 0.38 Misuse of Personal Information [applied]
ITGC (1.2.2022) ORP.3.A1 - Blocks → G 0.42 Social Engineering [applied]
ITGC (1.2.2022) ORP.3.A1 - Blocks → G 0.45 Data Loss [applied]
ITGC (1.2.2022) ORP.3.A1 - Blocks → G 0.46 Loss of Integrity of Sensitive Information [applied]
ITGC (1.2.2022) ORP.3.A1 - Blocks → G 0.14 Interception of Information / Espionage [applied]
ITGC (1.2.2022) ORP.3.A3 - Blocks → G 0.15 Eavesdropping [applied]
ITGC (1.2.2022) ORP.3.A3 - Blocks → G 0.19 Disclosure of Sensitive Information [applied]
ITGC (1.2.2022) ORP.3.A3 - Blocks → G 0.24 Destruction of Devices or Storage Media [applied]
ITGC (1.2.2022) ORP.3.A3 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.3.A3 - Blocks → G 0.30 Unauthorised Use or Administration of Devices and Systems [applied]
ITGC (1.2.2022) ORP.3.A3 - Blocks → G 0.31 Incorrect Use or Administration of Devices and Systems [applied]
ITGC (1.2.2022) ORP.3.A3 - Blocks → G 0.32 Misuse of Authorisation [applied]
ITGC (1.2.2022) ORP.3.A3 - Blocks → G 0.36 Identity theft [applied]
ITGC (1.2.2022) ORP.3.A3 - Blocks → G 0.37 Repudiation of Actions [applied]
ITGC (1.2.2022) ORP.3.A3 - Blocks → G 0.38 Misuse of Personal Information [applied]
ITGC (1.2.2022) ORP.3.A3 - Blocks → G 0.42 Social Engineering [applied]
ITGC (1.2.2022) ORP.3.A3 - Blocks → G 0.45 Data Loss [applied]
ITGC (1.2.2022) ORP.3.A3 - Blocks → G 0.46 Loss of Integrity of Sensitive Information [applied]
ITGC (1.2.2022) ORP.3.A3 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.3.A4 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.3.A6 - Blocks → G 0.14 Interception of Information / Espionage [applied]
ITGC (1.2.2022) ORP.3.A7 - Blocks → G 0.15 Eavesdropping [applied]
ITGC (1.2.2022) ORP.3.A7 - Blocks → G 0.19 Disclosure of Sensitive Information [applied]
ITGC (1.2.2022) ORP.3.A7 - Blocks → G 0.24 Destruction of Devices or Storage Media [applied]
ITGC (1.2.2022) ORP.3.A7 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.3.A7 - Blocks → G 0.30 Unauthorised Use or Administration of Devices and Systems [applied]
ITGC (1.2.2022) ORP.3.A7 - Blocks → G 0.31 Incorrect Use or Administration of Devices and Systems [applied]
ITGC (1.2.2022) ORP.3.A7 - Blocks → G 0.32 Misuse of Authorisation [applied]
ITGC (1.2.2022) ORP.3.A7 - Blocks → G 0.36 Identity theft [applied]
ITGC (1.2.2022) ORP.3.A7 - Blocks → G 0.37 Repudiation of Actions [applied]
ITGC (1.2.2022) ORP.3.A7 - Blocks → G 0.38 Misuse of Personal Information [applied]
ITGC (1.2.2022) ORP.3.A7 - Blocks → G 0.42 Social Engineering [applied]
ITGC (1.2.2022) ORP.3.A7 - Blocks → G 0.45 Data Loss [applied]
ITGC (1.2.2022) ORP.3.A7 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.3.A8 - Blocks → G 0.14 Interception of Information / Espionage [applied]
ITGC (1.2.2022) ORP.3.A9 - Blocks → G 0.15 Eavesdropping [applied]
ITGC (1.2.2022) ORP.3.A9 - Blocks → G 0.19 Disclosure of Sensitive Information [applied]
ITGC (1.2.2022) ORP.3.A9 - Blocks → G 0.24 Destruction of Devices or Storage Media [applied]
ITGC (1.2.2022) ORP.3.A9 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.3.A9 - Blocks → G 0.30 Unauthorised Use or Administration of Devices and Systems [applied]
ITGC (1.2.2022) ORP.3.A9 - Blocks → G 0.31 Incorrect Use or Administration of Devices and Systems [applied]
ITGC (1.2.2022) ORP.3.A9 - Blocks → G 0.32 Misuse of Authorisation [applied]
ITGC (1.2.2022) ORP.3.A9 - Blocks → G 0.36 Identity theft [applied]
ITGC (1.2.2022) ORP.3.A9 - Blocks → G 0.37 Repudiation of Actions [applied]
ITGC (1.2.2022) ORP.3.A9 - Blocks → G 0.38 Misuse of Personal Information [applied]
ITGC (1.2.2022) ORP.3.A9 - Blocks → G 0.42 Social Engineering [applied]
ITGC (1.2.2022) ORP.3.A9 - Blocks → G 0.45 Data Loss [applied]
ITGC (1.2.2022) ORP.3.A9 - Blocks → G 0.46 Loss of Integrity of Sensitive Information [applied]
ITGC (1.2.2022) ORP.3.A9 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ORP.4.A1 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ORP.4.A2 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ORP.4.A3 - Blocks → G 0.22 Manipulation of Information [applied]
ITGC (1.2.2022) ORP.4.A4 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.4.A4 - Blocks → G 0.32 Misuse of Authorisation [applied]
ITGC (1.2.2022) ORP.4.A4 - Blocks → G 0.37 Repudiation of Actions [applied]
ITGC (1.2.2022) ORP.4.A4 - Blocks → G 0.16 Theft of Devices, Storage Media and Documents [applied]
ITGC (1.2.2022) ORP.4.A5 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ORP.4.A5 - Blocks → G 0.29 Violations of Laws or Regulations [applied]
ITGC (1.2.2022) ORP.4.A5 - Blocks → G 0.44 Unauthorised Entry to Premises [applied]
ITGC (1.2.2022) ORP.4.A5 - Blocks → G 0.18 Poor Planning or Lack of Adaptation [applied]
ITGC (1.2.2022) ORP.4.A6 - Blocks → G 0.23 Unauthorised Access to IT Systems [applied]
ITGC (1.2.2022) ORP.4.A6 - … and 6936 more
Ticket collegati
| Tipo di collegamento | Ticket |
|---|---|
| is related to | IT-Grundschutz-Compendium |
| is related to | English |
| is related to | Major |
| is related to | New version |
| is related to | Germany |
| is related to | Information Security |
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)