Modeling the information scope#
When modeling the information scope, the modules from the IT-Grundschutz Compendium are mainly assigned to the scope and its target objects or target object groups. A distinction is made between assigning process modules to the scope and (mostly system) modules to target objects or target object groups.
Process modules are assigned to the scope via the "Process modules" category on the information scope.
All relevant process modules must be assigned to the scope here. Modules are assigned to target objects/target object groups via the "Assigned modules" category on the target object/target object group.
All system modules relevant for this target object/target object group must be assigned here. Process modules can also be assigned if this makes sense (for example, different backup concepts for individual objects).
Contact assignments#
For each used module, responsibilities should be recorded via the "Contact assignment" category.
Order#
You can define a processing order for modules using the "Order" column.