Dessau-Roßlau

High requirements for critical infrastructure

Due to the significant role of public administration and the highly sensitive data processed, city administrations and their related bodies (such as emergency services and other departments) are subject to particularly strict requirements for information security and business continuity management. Therefore, the goal for Dessau-Roßlau city administration was to establish a reliable ISMS based on the BSI IT-Grundschutz. Particular attention had to be paid to the analysis and documentation of the complex organizational structures to ensure transparency and clarity. Despite the interconnectedness of these systems, it was essential to optimize the functional management of individual information networks for the administration, departments, and emergency services, among others. Standardized reports for management and supervisory bodies had to be created to achieve uniformity.

Overall, the focus for the customer was on the high requirements on information security and the provision of a reliable software solution.

All-in-one solution from Germany

For IT-Grundschutz implementation, Athereon GRC pursues a strategy of directly modeling components and authentically documenting organizational values, including hierarchical dependencies. The management of all ISMS-relevant documents, policies, and templates including direct links, is handled within the Athereon GRC document management system using corresponding components. Athereon GRC audit management supports external audits and penetration tests. Furthermore, customers now have the option of automatically generating A-reports according to BSI (German Federal Office for Information Security) guidelines.

Athereon GRC is developed and provided entirely in Germany and meets all BSI ITG requirements.

Less effort, simple documentation

Thanks to the implementation of IT-Grundschutz with a customized solution from Athereon GRC, the city administration has significantly reduced workload in information security management. The simplified reporting facilitates communication with all stakeholders and regulatory authorities. This allows an increasing number of organizational areas to be managed with Athereon GRC.