ŶŐůŝƐŚ ŶŐůŝƐŚ ŶŐůŝƐŚ Example of how an assessment is evaluated. ŶŐůŝƐŚ ŶŐůŝƐŚ ŶŐůŝƐŚ Overall maturity rating Overall maturity Identifizieren (ID-rating ID-Identify Identify) rating Overall maturity Identifizieren (ID4 DE - Detect Anomalies and Events Vorfälle DE - Detect 4 Anomalies and Events Vorfälle DE34- Detect ID-Identify Identify) Identifizieren (ID34 ID-Identify Identify) Anomalies and Events Vorfälle 3 42 3 Wiederherstellen RC-Recover (RC-Recover) Wiederherstellen RC-Recover (RC-Recover) Wiederherstellen RC-Recover (RC-Recover) 31 2 20 1 1 0 0 Reagieren (RSRS-Respond Respond) (RSReagieren RS-Respond Respond) Reagieren (RSRS-Respond Respond) 24 Schützen (PRPR-Protect Protect) (PRSchützen PR-Protect Protect) Schützen (PRPR-Protect Protect) Present state Erkennen (DEDE-Detect Detect) (DEErkennen DE-Detect Detect) Erkennen (DEDE-Detect Detect) Target state Present state Target state Present state Target state 123 Detection Detection Processes Processes Detection Detection Processes Processes Detection Detection Processes Processes Risikomanagement Risk management Strategie Risikomanagement strategy Risk management Strategie strategy Risikomanagement Risk management Strategie strategy 42 3 31 2 20 1 1 0 4 Response Planning Planning Response RS 3-4Respond Business Geschäftsumfeld Verbesserungen environment Improvements Business Geschäftsumfeld environment Business Present state Verbesserungen Improvements GeschäftsumfeldTarget state environment Present state Verbesserungen Target state Improvements Present state Governance Target state Governance Governance Governance 0 Risikomanagement Risk assessment Risikomanagement Risk assessment Risikomanagement Risk assessment Governance Governance Protective Protective Protective Technology Protective Technology Technology Technology Protective Protective Technology Technology Maintenance Maintenance Maintenance Maintenance 4 2 3 1 2 0 1 3 2 1 0 0 Maintenance Maintenance Schutz von Daten Information Protection Schutz von Daten Information Protection Response Planning Planning Response 3 24 Kommunikation Communication 123 Kommunikation Communication 012 Present state Target state Kommunikation Communication 01 0 Mitigation Mitigation Analyse Analysis Mitigation Mitigation Present state Target state Present state Target state Analyse Analysis MitigationRC - Recover Analyse Analysis Mitigation Wiederherstellungs RC -planung Recover Recovery planning Wiederherstellungs 4 Recovery planning RC - planung Recover PR-Protect Schützen (PR - Protect) PR-Protect Schützen (PR - Protect) Access management Zugriffsmanageme PR-Protect Schützen - Protect) Access management ntZugriffsmanageme und(PR -steuerung 4 -steuerung nt und Access management Zugriffsmanageme 4 nt und3-steuerung Überwachung Monitoring Security Continous Überwachung Monitoring Security Continous Überwachung Monitoring 0 Response Planning Response Planning RS - Respond 4 Supply chain risk Lieferketten management Risikomanagement Supply chain risk Lieferketten management Risikomanagement Supply chain risk Lieferketten management Risikomanagement 01 RS - Respond ID-Identify Identifizieren (ID-Identify) ID-Identify Identifizieren (ID-Identify) Asset Inventar management ID-Identify Management Identifizieren (ID-Identify) Asset Inventar management Management Asset Inventar management 34 Management Present state Target state Present state Target state Present state Target state Security Continous 012 34 Wiederherstellungs Recovery planning planung 234 Awareness Awarenessand Awareness Training Awareness and training and Training and training Awareness and Present state Awareness Training Present state and training Target state Target state Present state Target state Data Datensicherheit DataSecurity Security Data Datensicherheit DataSecurity Security Data Datensicherheit DataSecurity Security 123 012 01 Kommunikation Communication 0 Present state Target state Present state Target state Present state Verbesserungen Improvements Target state Kommunikation Communication Verbesserungen Improvements Kommunikation Communication Verbesserungen Improvements Schutz von Daten Information Protection Figure 1: Example of how an assessment is evaluated. Minimum ICT standard 2018 39