The ISDP concept forms the basis for defining the information security and data protection measures. It shows the residual risks associated with the operation of the IT system and the organization. It describes the emergency concept.

1. List of security-related documents
2. Classification based on the protection needs analysis
3. Security-related system description
4. Risk analysis with residual risks
5. Emergency concept
6. Processing regulations
7. Compliance with/review of protection measures
8. Testing/acceptance of information security functions
9. Liquidation