BSI IT-Grundschutz DER.2.3: DER.2.3 Bereinigung weitreichender Sicherheitsvorfälle (Clean-up of Extensive Security Incidents)

Describes how an institution should proceed after an APT attack to clean its IT systems and restore the regular and secure operating state of the information domain. In Edition 2023 the Baustein carries 10 requirement numbers, 10 of them live: 6 Basis requirements (B, MUSS, to be fulfilled first and without exception), 2 Standard requirements (S, SOLLTE) and 2 requirements for elevated protection needs (H). It is applied to the information domain as a whole (overarching aspects) in modelling order R3. The requirements property on this node lists every requirement by number, title, level and responsible role, so a requirement is cited as DER.2.3.A<n>.