Decide on ISDP concept

Purpose

The decision on the ISDP concept is the prerequisite for implementing the ISDP measures and realizing the IT system. The project sponsor approves the ISDP concept and accepts the residual risks with the phase release decision.

Basic idea

The decision on the ISDP concept confirms compliance with the specifications of the core organization.

HERMES-specific

The decision on the ISDP concept is made by the competent controlling and compliance body.

In the case of procurement (i.e. not customized development) of an IT system, the ISDP concept is reviewed after evaluation. This is because the tender chosen has a significant impact on the ISDP concept.

Activities

  1. Add further criteria to the ISDP concept checklist
  2. Have the ISDP concept checked by the competent controlling and compliance body and get feedback
  3. Create decision-making documents
  4. Supply decision-makers with the decision-making documents
  5. Integrate the review results into the decision-making process for phase release
  6. Have the project sponsor acknowledge protection measures and residual risks

Relationships

Outcomes