The protection needs analysis determines the information security and data protection requirements.

A protection needs analysis must be conducted for each IT project. This ensures that the ISDP aspects are taken into account from the start.

If the protection needs analysis shows that enhanced protection is necessary, an ISDP concept with an in-depth risk analysis must be designed during solution development.

1. Project initiation release milestone
2. Project initiation order
3. Stakeholder list

1. Analyze information security and protection needs.
2. Perform risk analysis.
3. Review information security and data protection requirements and assess the impact on the study, project execution, and the envisaged solution.
4. Coordinate protection needs analysis with the controlling and compliance bodies.

1. Protection needs analysis