|
The IT baseline protection (in German ''IT-Grundschutz'') approach from the German Federal Office for Information Security (FSI) is a methodology to identify and implement computer security measures in an organisation. The aim is the achievement of an adequate and appropriate level of security for IT systems. To reach this goal the FSI recommends "well-proven technical, organisational, personnel, and infrastructural safeguards". Organisations and federal agencies show their systematic approach to secure their IT systems (e.g. Information Security Management System) by obtaining an ''ISO/IEC 27001 Certificate on the basis of IT-Grundschutz''. == Overview baseline security == The term baseline security signifies standard security measures for typical IT systems. It is used in various contexts with somewhat different meanings. For example: * Microsoft Baseline Security Analyzer: Software tool focused on Microsoft operating system and services security * (Cisco security baseline ): Vendor recommendation focused on network and network device security controls * (Nortel baseline security ): Set of requirements and best practices with a focus on network operators * ISO/IEC 13335-3 defines a baseline approach to risk management. This standard has been replaced by ISO/IEC 27005, but the baseline approach was not taken over yet into the 2700x series. * There are numerous internal baseline security policies for organizations,〔(【引用サイトリンク】 title=Department Baseline Security Policy and End User Agreement )〕〔 * The German FSI has a comprehensive baseline security standard, that is compliant with the ISO/IEC 27000-series〔 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「IT baseline protection」の詳細全文を読む スポンサード リンク
|