Statistics
1000
Controls
20
Practices
140
Groups
Requirement levels (modal verbs)
MUSS
149 (14%)
SOLLTE
627 (62%)
KANN
224 (22%)
(none)
0 (0%)
Security levels & effort
normal-SdT
773 (77%)
erhöht
227 (22%)
Effort 0
148 (14%)
Effort 1
52 (5%)
Effort 2
171 (17%)
Effort 3
281 (28%)
Effort 4
159 (15%)
Effort 5
189 (18%)
Controls per practice
| ID | Practice | Controls | MUSS | SOLLTE | KANN | Share |
|---|---|---|---|---|---|---|
| GC | Governance und Compliance | 35 | 31 | 4 | 0 |
|
| STM | Strukturmodellierung | 15 | 14 | 1 | 0 |
|
| UMS | Umsetzung | 11 | 10 | 1 | 0 |
|
| VRB | Verbesserung | 10 | 8 | 2 | 0 |
|
| PERF | Monitoring-Evaluation | 24 | 13 | 11 | 0 |
|
| RISK | Risikomanagement | 4 | 4 | 0 | 0 |
|
| ASST | Informationen und Assets | 58 | 5 | 37 | 16 |
|
| PERS | Personal | 30 | 5 | 24 | 1 |
|
| BES | Beschaffungsmanagement | 109 | 5 | 73 | 31 |
|
| DLS | Dienstleistersteuerung | 18 | 5 | 9 | 4 |
|
| TEST | Änderungen und Tests | 36 | 5 | 22 | 9 |
|
| GEB | Gebäudemanagement | 75 | 5 | 35 | 35 |
|
| SENS | Sensibilisierung | 87 | 4 | 72 | 11 |
|
| ARCH | Architektur | 63 | 5 | 42 | 16 |
|
| BER | Berechtigung | 92 | 5 | 80 | 7 |
|
| NOT | Notfallplanung | 37 | 5 | 25 | 7 |
|
| DET | Detektion | 82 | 5 | 38 | 39 |
|
| REA | Sicherheitsvorfallsbehandlung | 23 | 5 | 13 | 5 |
|
| KONF | Konfiguration | 157 | 5 | 110 | 42 |
|
| DEV | Entwicklung | 34 | 5 | 28 | 1 |
|