Compliance & Regulation
15 terms in this topic area.
BSI IT-Grundschutz
What is the BSI IT-Grundschutz? Standards 200-1 to 200-4, the Compendium and its modules, three levels of protection, a seven-step approach and certification.
Cloud Compliance
Cloud compliance means meeting legal and regulatory rules in the cloud. See how companies do this with technical and organizational measures.
Governance
What does governance mean? Definition, origin, how it differs from management and compliance, plus corporate, IT and data governance – explained simply.
Information Security Policy
What is an information security policy? Content, how it differs from topic policies and security concepts, and how ISO 27001, BSI and NIS2 treat it.
ISO 27001
What is ISO 27001? The information security standard explained: requirements, Annex A, the certification process, duration, costs and validity.
IT Audit Management
IT audit management checks IT security, compliance and efficiency in your company. See strategies, processes and best practices.
IT Compliance
IT compliance means your IT meets legal requirements. See how it protects companies from risks and supports lasting IT security strategies.
IT Governance
IT governance aligns IT with business goals. See its definition, frameworks, strategies, benefits, challenges and best practices.
IT Security Act (IT-Sicherheitsgesetz)
The German IT Security Act (IT-Sicherheitsgesetz) protects digital infrastructures. See how it developed, what it does and which challenges it brings.
IT Security Concept
What is an IT security concept? Key parts, the BSI IT-Grundschutz method, the link to ISO 27001 and who needs one.
NIS2 Directive
NIS2 and the German implementation act: who is affected, the duties under the new BSIG, reporting deadlines, registration, fines and a checklist.
SABSA Framework
The SABSA framework is a proven method for business-driven security architecture. It fits companies of any size or industry.
Security Objectives (CIA Triad)
What are the objectives of information security? Confidentiality, integrity and availability in ISO 27001 and BSI, with examples and controls.
SOC 2
What is SOC 2? The audit report explained simply: Trust Services Criteria, Type I and Type II, the process, validity and how it differs from ISO 27001.
TISAX
What is TISAX? Assessment levels, assessment objectives, the process and label validity, and why TISAX is not formally a certification.