BSI IT-Grundschutz
CON: Konzepte und Vorgehensweisen (Concepts and Approaches) – BSI IT-Grundschutz

BSI IT-Grundschutz CON.1: Kryptokonzept (Crypto Concept)

What does CON.1 require?

Describes how a cryptographic concept is drawn up and how information in institutions is protected cryptographically with it. In Edition 2023 the Baustein carries 20 requirement numbers, 13 of them live: 3 Basis requirements (B, MUSS, to be fulfilled first and without exception), 5 Standard requirements (S, SOLLTE) and 5 requirements for elevated protection needs (H), with 7 numbers withdrawn (ENTFALLEN) and kept for stable numbering. It is applied to the information domain as a whole (overarching aspects) in modelling order R3. The requirements property on this node lists every requirement by number, title, level and responsible role, so a requirement is cited as CON.1.A<n>.

Maintained by Gerard BlokdykControl text last updated

Other controls in CON: Konzepte und Vorgehensweisen (Concepts and Approaches) – BSI IT-Grundschutz

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.