ISMS

IT Documentation with i-doit: The Foundation for Successful ISMS

Get a comprehensive overview of your (IT) infrastructure while maintaining high data quality through integrated processes.

The ISMS add-on integrates security documentation directly into your CMDB, where it belongs. Since IT documentation is the first to know about new components and infrastructure changes, you can manage security assessments daily through risk identification and evaluation of objects (IT assets, Configuration Items) directly in i-doit.

We believe change processes are complex enough already! Avoid purchasing additional software and maintaining redundant data. The ISMS add-on's native i-doit integration leverages existing functions like templates, bulk processing, and reporting. Users can add security information to assets without modifying the underlying data model. For final refinements to your Risk Management Process, the Documents add-on can incorporate ISMS data into professionally formatted documents matching your corporate design.

Only three steps to ISO27001 standard conform documentation and risk assessment

• You carry out all matters of risk assessment directly in the context of the IT assets with the installation of the ISMS add-on already (e.g. Annex A of the ISO27001, “IT-Grundschutz Catalog” of BSI or the “IT Security catalog” of “Bundesnetzagentur”).
• The second step comprises individual definition of Risk Management in the company. This contains above all an adjustment of the catalogs stored in the ISMS add-on. Individual impact scenarios and measures are recorded and roles, responsibilities and rating scales are defined. The initial definition of reports completes this step.
• The third step is the actual start of Risk Management and the core task to fulfill the ISO27001 standard. Analysis and evaluation of assets as well as versioning and documentation guidance in the course of the PDCA cycle (Plan, Do, Check, Act) supported by the ISMS add-on are part of this step.