Design ISDP concept
The ISDP concept creates the prerequisites for ensuring information security and data protection.
The ISDP concept completes the information security and data protection requirements. It includes a detailed risk analysis. The protection measures are defined.
The ISDP concept must be handled in accordance with the information protection requirements (especially if it is classified as CONFIDENTIAL or SECRET, it may be stored only in encrypted form).
Create a system description with the security-related components
Create a risk analysis, show how risks are addressed with overarching concepts and identify residual risks
Create the emergency concept and processing regulations, and record them in the ISDP concept
Coordinate the ISDP concept with the controlling and compliance bodies