OPS — Operations
BSI IT-Grundschutz Building Blocks of the Operations Layer
Building Blocks of the Operations Layer in the BSI IT-Grundschutz Compendium.
OPS.1.1.1 General IT Operations
IT Operations represents an organizational unit and the associated business process within information technology. The process describes the tasks …
OPS.1.1.2 Proper IT Administration
IT administration refers primarily to activities within IT Operations that require administrative rights and that modify the configuration of IT …
OPS.1.1.3 Patch and Change Management
It is a major challenge to update the IT components deployed in an institution correctly and in a timely manner. In practice, it is evident that …
OPS.1.1.4 Protection Against Malware
Malware consists of programs that typically execute harmful functions on an IT system without the knowledge and consent of the users. These harmful …
OPS.1.1.5 Logging
To ensure reliable IT Operations, IT systems and applications should log either all or at least selected operationally and security-relevant events, …
OPS.1.1.6 Software Testing and Approvals
The use of IT in institutions requires that automated data processing functions as error-free as possible, since the individual results can in most …
OPS.1.1.7 System Management
Reliable system management is a fundamental prerequisite for the secure and efficient operation of modern networked systems. For this purpose, a …
OPS.1.2.2 Archiving
Archiving plays a special role in the document management process. On the one hand, it is expected that digital documents will be available until the …
OPS.1.2.4 Telework
Telework refers to any activity supported by information and communications technology that is performed wholly or partly outside the premises and …
OPS.1.2.5 Remote Maintenance
The term remote maintenance refers to time-limited access to IT systems and the applications running on them, carried out from another IT system. The …
OPS.1.2.6 NTP Time Synchronization
Networked IT systems often require synchronized states. The system time usually serves as a reference. However, the internal clock of IT systems can …
OPS.2.2 Cloud Use
Cloud computing refers to the demand-driven provision, use, and billing of IT services over a network. The range of services offered within the …
OPS.2.3 Use of Outsourcing
In outsourcing, institutions (outsourcing users) outsource business processes or activities wholly or partly to one or more external service companies …
OPS.3.2 Providing Outsourcing
In outsourcing, institutions (outsourcing users) outsource business processes or activities wholly or partly to one or more external service companies …