Establishes information security as an integral part of proper IT administration, so that the administration activities required for the security of the information domain are carried out properly and systematically and the institution responds to the risks that arise from the far-reaching rights of administrators. In Edition 2023 the Baustein carries 30 requirement numbers, 21 of them live: 6 Basis requirements (B, MUSS, to be fulfilled first and without exception), 10 Standard requirements (S, SOLLTE) and 5 requirements for elevated protection needs (H), with 9 numbers withdrawn (ENTFALLEN) and kept for stable numbering. It is applied to the information domain as a whole (overarching aspects) in modelling order R1. The requirements property on this node lists every requirement by number, title, level and responsible role, so a requirement is cited as OPS.1.1.2.A<n>.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.