BSI IT-Grundschutz
OPS: Betrieb (Operations) – BSI IT-Grundschutz

BSI IT-Grundschutz OPS.3.2: Anbieten von Outsourcing (Provision of Outsourcing)

What does OPS.3.2 require?

Ensures the basic values of information security over the whole life cycle of classic IT outsourcing from the perspective of the provider, so that a provider guarantees a basic level of information security towards the institutions using its services. In Edition 2023 the Baustein carries 21 requirement numbers, 21 of them live: 6 Basis requirements (B, MUSS, to be fulfilled first and without exception), 12 Standard requirements (S, SOLLTE) and 3 requirements for elevated protection needs (H). It is applied to the information domain as a whole (overarching aspects) in modelling order R3. The requirements property on this node lists every requirement by number, title, level and responsible role, so a requirement is cited as OPS.3.2.A<n>.

Maintained by Gerard BlokdykControl text last updated

Other controls in OPS: Betrieb (Operations) – BSI IT-Grundschutz

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.