{"id":5651,"date":"2023-08-27T19:03:56","date_gmt":"2023-08-27T17:03:56","guid":{"rendered":"https:\/\/src-gmbh.de\/portfolio\/loesungen\/achieving-a-defined-level-of-security-the-security-concept\/"},"modified":"2023-10-03T14:46:35","modified_gmt":"2023-10-03T12:46:35","slug":"achieving-a-defined-level-of-security-the-security-concept","status":"publish","type":"loesungen","link":"https:\/\/src-gmbh.de\/en\/portfolio\/solutions\/achieving-a-defined-level-of-security-the-security-concept\/","title":{"rendered":"Achieving a defined safety level: The safety concept"},"content":{"rendered":"
\n
\n

At the beginning there is the safety concept<\/strong>.<\/h3>\n<\/div>\n
\n
\n

The development of a security concept is often the beginning of information security management. The aim of the security concept is to identify the necessary need for protection of information, systems and processes and to define measures that are suitable for achieving a level of security appropriate to this need for protection. In this regard, based on the experience of the SRC, the following approach is appropriate:<\/p>\n<\/div>\n<\/section>\n

\n
    \n
  • \n
    Identification of objects worthy of protection and their need for protection<\/div>\n<\/li>\n
  • \n
    Analysis of the threats acting on the objects<\/div>\n<\/li>\n
  • \n
    Qualitative assessment of probability of occurrence and potential amount of damage<\/div>\n<\/li>\n
  • \n
    Definition of measures to reduce the probability of occurrence \/ extent of damage<\/div>\n<\/li>\n
  • \n
    Implementation of measures<\/div>\n<\/li>\n
  • \n
    Identification of residual risks remaining after implementation of measures<\/div>\n
    \n
    \n
    \n
    Determining how to deal with residual risks<\/div>\n<\/header>\n<\/div>\n<\/article>\n
    \n