Club R2GS/SoSo - IKT-Betriebssicherheit

Club R2GS  - Operational Security Management Thought and Research Club 

Le Club R2GS (Recherche et Réflexion en Gestion opérationnelle de la Sécurité

German Chapter Club R2GS-SoSo:

Spezification of Operational Security in Organizations

Operative Security in the Focus of Enterprises and Organizations in Germany

Cyber Defense Solution suggested: 

Information Security Indicator (ISI) Catalogue shall be applied for the Evaluation of the Operative ICT Security & Safety of Enterprises and Organizations, i.e. 

Security Incidents (Sicherheitsvorfälle) of External Attacks and Intrusions, Functional Failures, Uncertainties of internal Behaviour; 

Known Vulnerabilities (Schwachstellen) of failing Personnel, Software, Configurations, general technical and organizational Vulnerabilities; 

The fight against Incidents and Vulnerabilities is modeled by the R2GS-SoSo Cyber Defense & Security Model   comprising 4 pillars of handling information in an organization for the purpose of Energy and Security Efficiency:

1. WHO --> Stakeholder Model [14 PS02 German] 

i.e. ISO/IEC 29180, ITU-T X.1311 IT Security Framework for Ubiquitious Sensor Networks;

2. WHAT --> Information & Data Acquistion Model [14 PS01 German] 
i.e. ISO/IEC/IEEE 42010:2011 System and SW Engineering Architecture Description;

3. HOW --> Security Architecture Model [14 PS03 German] 

i.e. ISO/IEC 27044 SIEM, BSI IST/33 - ISO/IEC 19086 Security&Privacy Aspects of SLA; 

4. WHY --> Compliance Model [14 PS04 German] 

i.e. ISO/IEC 27001:2013, ISO/IEC 22301:2014 Continuity Management for Security in Enterprises and Organizations;