26
IT-security: The security policy
l
One standardized security policy
(Project together with Turner)
l
Intranet application for all employees
l
German and English version
l
IT-controlling / internal audits
l
Maintenance will be done in
cooperation with Secunet
l
Principles and
general
instructions
OSIRIS
Classification of
protection-classes
Catalogue
of measures
A
C
B
Vt
In
Vf
X
X
X
Already realized
measures
Not realized
measures
Technical and
organizational
measures
Target
performance
comparison
For example
l
Backup concept
l
Firewall policy
l
Protection against virus
l
Encryption concept
l
Measures for Server-Security
l
...
Only the necessary
measures for the
project team /
employee ...
Documentation for
the internal audits