An information security management system (ISMS) is a systematic approach to ensuring information security in organizations. It helps to identify and assess risks and implement suitable measures to secure processes and data - e.g. in accordance with ISO/IEC 27001.

The ISMS tool covers requirements from the following norms and standards, among others:

• ISO/IEC 27001 & ISO/IEC 27002

• Compliance catalogs (e.g. TISAX®, BAIT, VAIT, DIN EN ISO 9001 etc.)

• Risk management, audit and action management including BIA (Business Impact Analysis)

The EU's NIS 2 Directive is a legal framework for increasing cyber security in critical sectors. It extends the requirements for security measures and reporting obligations for companies and organizations in the EU.

With the i-doit INDITOR NIS 2 module, i-doit offers a tool that maps the contents of the NIS 2 directive in a fully structured manner. Among other things, it supports

• Clear inventory of the implementation status

• Integrated GAP analysis/checklist for NIS2 compliance

• Centralized management of responsibilities, evidence and measures

• Audit-proof documentation for audit preparation

• ISO 27001 is an international standard for a structured ISMS.

• NIS2 is an EU directive with binding legal requirements on cyber security for affected organizations.

  The NIS2 module uses an ISMS system as a technical platform to implement the directive efficiently.

IT baseline protection is an approach developed by the German Federal Office for Information Security (BSI) for a holistic information security management system. It comprises organizational, infrastructural and technical measures to secure systems and processes.

With i-doit INDITOR BSI, i-doit offers software for implementing IT baseline protection in accordance with the BSI standards (including 200-1, 200-2, 200-3). This solution:

• maps the BSI specifications in a structured manner

• enables risk management, documentation & task management

• provides templates for guidelines and reports

• supports individually customizable per scope

Yes, the -i-doit software has a modular structure and can be used flexibly:

• Only individual modules (e.g. ISO-ISMS, NIS2 or IT-Grundschutz)

• or integrated as part of a comprehensive information security management system with a shared database and standardized interface.

With i-doit solutions, you benefit from

• Structured and standardized procedures

• Centralized documentation and verification

• Automated process support

• Audit and certification preparation

• Reduction of manual effort

You can:

• request a demo or trial version

• book a consultation or webinar

• introduce the software step by step - from the first status check to full compliance implementation.