BSI IT-Grundschutz
OPS: Betrieb (Operations) – BSI IT-Grundschutz

BSI IT-Grundschutz OPS.2.3: Nutzung von Outsourcing (Use of Outsourcing)

What does OPS.2.3 require?

Ensures the basic values of information security, confidentiality, integrity and availability, over the whole life cycle of classic IT outsourcing from the perspective of the institution using it, so that the potential threats to the business processes from outsourcing are addressed. In Edition 2023 the Baustein carries 24 requirement numbers, 24 of them live: 7 Basis requirements (B, MUSS, to be fulfilled first and without exception), 13 Standard requirements (S, SOLLTE) and 4 requirements for elevated protection needs (H). It is applied to the information domain as a whole (overarching aspects) in modelling order R2. The requirements property on this node lists every requirement by number, title, level and responsible role, so a requirement is cited as OPS.2.3.A<n>.

Maintained by Gerard BlokdykControl text last updated

Other controls in OPS: Betrieb (Operations) – BSI IT-Grundschutz

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.