The easy path to IT security

While large companies typically have their own IT and IT security departments, the organization of IT security in small, micro and medium-sized companies is often very varied and sometimes inefficient. However, there are simple measures to structure and implement IT security effectively and efficiently.

This book is intended as a guide for this task: It provides IT service providers with a basis for supporting and advising their respective customers and can also be used by MSEs themselves to formulate and apply their own IT security strategy. Theoretical expertise is presented in a clear and easy-to-understand manner, legal and compliance requirements are explained, and the role of DIN SPEC 27076 in particular is presented.

“The easy path to IT security” includes the following content:

• IT risks and IT fields of action
• Overview of existing standards
• Guide to the successful implementation of IT security
• Practical examples
• Tips, tricks and interesting facts

Additionally, the book offers a comprehensive glossary, literature and web links as well as a look at potential future developments.

Basic principles and practical guide for SMEs

For companies with fewer than 50 employees, the German Federal Office for Information Security provides a practicable, appropriate framework of requirements, outlined in DIN SPEC 27076. This publication supports those affected with the practical implementation and provides them with a comprehensible guide for the real business situation.

Here’s what you can expect from “The easy path to IT security”:

• Basic knowledge and classification
  Definitions, key data, basic information – the publication provides basic knowledge on information security and sets it in relation to DIN SPEC 27076. In addition, it compares the document with legal and other frameworks, creating a broader understanding of the meaning and context.
• Practical implementation

The book provides comprehensive information on implementing DIN SPEC 27076 and contains a guide to the practical implementation of the requirements. This includes aspects such as authorization management, data backup, and protection against malware. It also provides information on audits and possible funding programmes through which small and medium-sized companies can receive state support for IT security.

In addition to a glossary of key terms, the book also features an overview of relevant laws and guidelines, as well as an index.

Included in this book:

• Introduction
• Legal requirements and compliance requirements
• Basics of information security
• Classification of DIN SPEC 27076 in relation to other frameworks
• Implementation of DIN SPEC 27076
• Guide to implementing the DIN-SPEC-27076 requirements
• Outlook

This book is for:

IT service providers, IT system integrators, IT security consultants, MSEs