Short description:

Developing a procedural model for IT security with respect to the results of a review report of a customer, which has found faults in the creation and change processes of the software development and in the field of general IT security, among other things.

Supplement:

Developing a procedure for eliminating the faults documented in the review report and for systematically tackling issues of IT security.

Technical description:

The tool GSTool (basic IT protection manual) from the German Federal Agency for Security in Information Technology (BSI), which supports the standard creation and monitoring of IT security measures, was examined to determine its suitability for the customer's issues.