Analyze protection needs

Purpose

The protection needs analysis determines the information security and data protection requirements.

Basic idea

A protection needs analysis is to be conducted for each IT project. This ensures that IT security is taken into account from the start.

HERMES-specific

If the protection needs analysis shows that enhanced protection is necessary, an in-depth risk analysis must be carried out and an information security and data protection concept (ISDP concept) must be prepared.

This is done with the information security and data protection module. The findings from the protection needs analysis are incorporated into the study.

Activities

  1. Conduct a protection needs analysis
  2. Analyze information security and data protection requirements and assess the impact on the study and project execution
  3. Coordinate protection needs analysis with the controlling and compliance bodies

Relationships

Module Task Task responsibility Outcome Involved in creation of outcome
Project foundations Analyze protection needs ISDP manager Protection needs analysis Project manager, Business process owner

Outcomes

  1. Protection needs analysis