{"id":4526,"date":"2017-02-03T18:49:10","date_gmt":"2017-02-03T17:49:10","guid":{"rendered":"https:\/\/www.sec4you.com\/?page_id=4526"},"modified":"2022-10-05T08:17:31","modified_gmt":"2022-10-05T06:17:31","slug":"security-data-protection-concepts","status":"publish","type":"page","link":"https:\/\/www.sec4you.com\/en\/consulting\/security-data-protection-concepts\/","title":{"rendered":"Secu\u00adri\u00adty + data pro\u00adtec\u00adtion concepts"},"content":{"rendered":"

<\/p>

SECURITY<\/span> CONCEPT<\/span>: SO<\/span> TEST<\/span> THEREFORE<\/span>, WHO<\/span> JOIN<\/span> FOREVER<\/span><\/strong><\/p>\n<\/div>

<\/div>
<\/div><\/div>
<\/div>
\"Datenschutzkonzept<\/span><\/div>
<\/div>
<\/div>
<\/div>
<\/div>
<\/div>
<\/div>
<\/div>
<\/div>
<\/div>
<\/div>
<\/div>
<\/div>
<\/div>
<\/div>
<\/div>

So test the\u00adr\u00ade\u00adfo\u00adre, who join fore\u00adver<\/strong>, if heart to heart be found tog\u00ade\u00adther! Delu\u00adsi\u00adon is short, remor\u00adse is long.<\/p>\n

Fried\u00adrich Schil\u00adler alre\u00ada\u00addy knew the methods of a con\u00adside\u00adred and struc\u00adtu\u00adred pro\u00adce\u00addu\u00adre befo\u00adre ente\u00adring into a con\u00adnec\u00adtion. Exact\u00adly this con\u00adside\u00adra\u00adti\u00adon must also be made befo\u00adre a new IT<\/span> sys\u00adtem estab\u00adlishes connections.<\/p>\n

A writ\u00adten secu\u00adri\u00adty con\u00adcept (SiKo) is the con\u00adti\u00adnua\u00adtion of the struc\u00adtu\u00adred pro\u00adce\u00addu\u00adre of an ISMS<\/span>.<\/p>\n

The aim of a secu\u00adri\u00adty con\u00adcept is to iden\u00adti\u00adfy risks and thre\u00adats and to defi\u00adne appro\u00adpria\u00adte secu\u00adri\u00adty mea\u00adsu\u00adres. The resi\u00addu\u00adal risks are deter\u00admi\u00adned and accept\u00aded by the respon\u00adsi\u00adble persons.<\/p>\n

A secu\u00adri\u00adty con\u00adcept defi\u00adned in wri\u00adting is the con\u00adti\u00adnua\u00adtion of the struc\u00adtu\u00adred pro\u00adce\u00addu\u00adre of an ISMS<\/span>.<\/strong><\/p>\n

In the IT<\/span> envi\u00adron\u00adment, a secu\u00adri\u00adty con\u00adcept means clas\u00adsi\u00adfy\u00ading the data pro\u00adces\u00adsed on the sys\u00adtem befo\u00adre each new sys\u00adtem is put into ope\u00adra\u00adti\u00adon and then taking the neces\u00adsa\u00adry mea\u00adsu\u00adres. The scope of the con\u00adcept depends stron\u00adgly on the cri\u00adti\u00adcal\u00adi\u00adty of the pro\u00adces\u00adsed data and the com\u00adple\u00adxi\u00adty of the sys\u00adtems used. Often, the SiKo is defi\u00adned direct\u00adly from the mini\u00admum secu\u00adri\u00adty mea\u00adsu\u00adres for IT<\/span> sys\u00adtems, which may have to be exten\u00added by hig\u00adher-level secu\u00adri\u00adty measures.<\/p>\n

A secu\u00adri\u00adty con\u00adcept in its mini\u00admal form con\u00adsists of:<\/p>\n

    \n
  • Inven\u00adto\u00adry and struc\u00adtu\u00adral ana\u00adly\u00adsis of the pro\u00adces\u00adsed data and invol\u00adved systems<\/li>\n
  • Imple\u00admen\u00adta\u00adti\u00adon of a pro\u00adtec\u00adtion needs assessment<\/li>\n
  • Recor\u00adding the hazards and eva\u00adlua\u00adting them<\/li>\n
  • Defi\u00adni\u00adti\u00adon of the neces\u00adsa\u00adry measures<\/li>\n
  • Eva\u00adlua\u00adti\u00adon and docu\u00admen\u00adta\u00adti\u00adon of resi\u00addu\u00adal risks<\/li>\n<\/ul>\n

    The aim of the SiKo is to pro\u00adtect the pro\u00adces\u00adsed data and to ensu\u00adre the tracea\u00adbi\u00adli\u00adty of the imple\u00admen\u00adted tech\u00adni\u00adcal and orga\u00adniza\u00adtio\u00adnal mea\u00adsu\u00adres. The requi\u00adred level of secu\u00adri\u00adty should be main\u00adtai\u00adned throug\u00adhout the ser\u00advice life of a system.<\/p>\n

    SEC4YOU<\/span> glad\u00adly sup\u00adports the crea\u00adti\u00adon of secu\u00adri\u00adty con\u00adcepts. During this pro\u00adcess, all points of the mini\u00admal form are work\u00aded out and docu\u00admen\u00adted in a struc\u00adtu\u00adred way.<\/p>\n

    \n

    The data pro\u00adtec\u00adtion con\u00adcept in the con\u00adtext of the GDPR<\/span><\/strong><\/p>\n

    A data pro\u00adtec\u00adtion con\u00adcept (DSK<\/span>) \u2014 even if it is cal\u00adled a \u201cpro\u00adtec\u00adtion\u201d con\u00adcept \u2014 will not pro\u00adtect the pro\u00adces\u00adsed data, but aims to pro\u00adtect the rights of the data sub\u00adjects. In the cour\u00adse of the GDPR<\/span>, the importance of crea\u00adting a DSK<\/span> increa\u00adses, as this is the only way to ensu\u00adre that the neces\u00adsa\u00adry data pro\u00adtec\u00adtion mea\u00adsu\u00adres are defi\u00adned and effec\u00adti\u00adve in all areas.<\/p>\n

    The respon\u00adsi\u00adbi\u00adli\u00adty for crea\u00adting a DSK<\/span> lies with the ser\u00advice mana\u00adger and not with the data pro\u00adtec\u00adtion offi\u00adcer, sin\u00adce the data pro\u00adtec\u00adtion offi\u00adcer usual\u00adly only has to crea\u00adte the struc\u00adtures, but is not direct\u00adly respon\u00adsi\u00adble for all applications.<\/p>\n

    The fol\u00adlo\u00adwing spe\u00adci\u00adfi\u00adca\u00adti\u00adons are defi\u00adned in a DSK<\/span>:<\/p>\n

      \n
    • Defi\u00adni\u00adti\u00adon of the spe\u00adci\u00adfi\u00adca\u00adti\u00adons for the coll\u00adec\u00adtion, pro\u00adces\u00adsing and use of per\u00adso\u00adnal data<\/li>\n
    • Defi\u00adni\u00adti\u00adon of the mea\u00adsu\u00adres to pri\u00adma\u00adri\u00adly pre\u00advent the misu\u00adse of per\u00adso\u00adnal data and to ensu\u00adre com\u00adpli\u00adance with the requi\u00adre\u00adments of the data pro\u00adtec\u00adtion act<\/li>\n<\/ul>\n

      The DSK<\/span> of an appli\u00adca\u00adti\u00adon defi\u00adnes the tar\u00adget sta\u00adte that is to be docu\u00admen\u00adted in the cour\u00adse of the DSGVO<\/span>.<\/p>\n

      The aim of the DSK<\/span> is to ful\u00adfill the requi\u00adre\u00adments of the Data Pro\u00adtec\u00adtion Act by pro\u00adtec\u00adting the per\u00adso\u00adnal rights of the data sub\u00adjects and to descri\u00adbe the tech\u00adni\u00adcal and orga\u00adniza\u00adtio\u00adnal mea\u00adsu\u00adres requi\u00adred for this purpose.<\/p>\n

      When imple\u00admen\u00adting DSK<\/span>, SEC4YOU<\/span> uses the mea\u00adsu\u00adres deve\u00adlo\u00adped in the secu\u00adri\u00adty con\u00adcept and extends them with spe\u00adci\u00adfic data pro\u00adtec\u00adtion measures.<\/p>\n<\/div>

      <\/div><\/div><\/div>

      YOUR<\/span> ADVANTAGES<\/span><\/strong><\/p>\n<\/div>

      <\/div>
      <\/div><\/div>
      <\/div>
        \n
      • A secu\u00adri\u00adty con\u00adcept is a struc\u00adtu\u00adred pro\u00adce\u00addu\u00adre<\/strong> befo\u00adre the intro\u00adduc\u00adtion of a new service<\/li>\n<\/ul>\n

         <\/p>\n

          \n
        • Iden\u00adti\u00adfies the risks and thre\u00adats<\/strong> and defi\u00adnes appro\u00adpria\u00adte secu\u00adri\u00adty mea\u00adsu\u00adres<\/strong> for them<\/li>\n<\/ul>\n

           <\/p>\n

            \n
          • Defi\u00adnes the requi\u00adred level of secu\u00adri\u00adty<\/strong> over the enti\u00adre ser\u00advice life<\/li>\n<\/ul>\n

             <\/p>\n

              \n
            • A data pro\u00adtec\u00adtion con\u00adcept is desi\u00adgned to pro\u00adtect the rights of data sub\u00adjects<\/strong>, not the data being processed<\/li>\n<\/ul>\n<\/div>
              <\/div><\/div><\/div><\/div><\/div>

              Ques\u00adti\u00adons about secu\u00adri\u00adty con\u00adcepts and data pro\u00adtec\u00adtion concepts?
              \nYou would like to talk to an expert?
              \n<\/span><\/p>\n<\/div>