Introduction of an ISMS based on IT-Grundschutz at the city of Wetter (Ruhr)
Wetter (Ruhr) is a district town with just under 30,000 inhabitants in the southeastern Ruhr region in North Rhine-Westphalia. Wetter (Ruhr) belongs to the Ennepe-Ruhr district. The city of Wetter (Ruhr) was formed by the merger of the formerly independent communities of Esborn, Volmarstein and Wengern, which belonged to the district of Volmarstein, and the old city of Wetter. Parts of the former communities of Berge and Silschede were also added to the urban area.
Challenge
The city of Wetter (Ruhr) has decided to introduce an information security management system (ISMS) in accordance with the recommendation of the German Federal Office for Information Security (BSI) based on IT-Grundschutz. After all, even at the municipal level, modern citizen service is hardly conceivable without IT. The onset of digitization and the latest attacks on global IT infrastructures are increasing the requirements for security and modern organizational management.
Implementation
Product presentations were given by several potential suppliers. After these meetings, the software products could be extensively tested independently using test accesses provided. In the course of this market investigation, the city of Wetter (Ruhr) decided in favor of the digital management system GRASP from DextraData GmbH in Essen. The requirements from the areas of IT security and data protection, as well as the possibility of emergency management, were best met by GRASP in the opinion of the responsible employees. GRASP also made the most modern visual impression. GRASP stands for Governance, Risk, Audit, Security Platform. What spoke in favor of GRASP was that the requirements of the two areas of IT security (ISMS) according to IT-Grundschutz and data protection (DSMS) can be mapped with GRASP on a common database in individual modules.
Result
“ISMS, DSM and also BCM – we now have everything under one hat,” summarizes Marco Hagedorn-Gündüz. GRASP manages to bundle competencies at the city of Wetter (Ruhr) and conserve resources. Less time and, above all, less budget now have to be invested in the same effectiveness. In order to operate IT security and data protection, it was possible to dispense with the introduction of isolated applications. The city of Wetter (Ruhr) benefits not only from synergies resulting from the consistent structure of the individual modules, but also from the efficiency gain through the use of a common database. GRASP also helps to increase the speed of work through the digitization and automation of processes.
