BSI IT-Grundschutz
CON: Konzepte und Vorgehensweisen (Concepts and Approaches) – BSI IT-Grundschutz

BSI IT-Grundschutz CON.2: Datenschutz (Data Protection)

What does CON.2 require?

Presents the link between the requirements of data protection law, as operationalised through the Standard Data Protection Model (SDM), and IT-Grundschutz, so that the guarantee objectives of data protection are implemented alongside the security objectives of the ISMS through the SDM's reference measures. In Edition 2023 the Baustein carries 1 requirement numbers, 1 of them live: 1 Basis requirements (B, MUSS, to be fulfilled first and without exception), 0 Standard requirements (S, SOLLTE) and 0 requirements for elevated protection needs (H). It is applied to the information domain as a whole (overarching aspects) in modelling order R2. The requirements property on this node lists every requirement by number, title, level and responsible role, so a requirement is cited as CON.2.A<n>.

Maintained by Gerard BlokdykControl text last updated

Other controls in CON: Konzepte und Vorgehensweisen (Concepts and Approaches) – BSI IT-Grundschutz

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.