HITS IS operates a central compliance tool that allows universities to create their own client and to document and monitor local ISMS, emergency management and data protection management.
We offer support and advice on the introduction and implementation of the centrally developed model (model university) at the local university as well as in all information security-related topics in accordance with the BSI Grundschutz, ISO27K, CISIS12 standards.
Scope of Services and Service Specifics
- Deploy a compliance tool with the optional modules
- Data protection
- Information Security and
- Emergency Management
- Audit
- Support in the ordering and implementation process
- Providing documentation
- Provision of samples and templates in the university's own client
Service Parameters
- Provision of training courses (multiplier training)
- Assist with onboarding and catalog selection (standards and methodologies)
- Support for local adaptation
- Processing requests via a ticket system
Requirements
- Designate the tool owner for the local administration
- Collecting ISMS-relevant documents and structures (e.g. processes, VVT, AVV, IT infrastructure)
- Self-contained asset capture and continuous maintenance
User / Customers
This service is made available to the following categories of users.
| User class | Note |
|---|---|
| (1), (2) | only for members of the Digital Network of Bavaria |
| (3), (4), (5), (6) | not available for these customers |
The service can be requested by the CIO, CISO, ISB, DATA CENTER management, emergency or data protection officer or coordinator of the universities participating in the framework agreement with GBTEC in the digital network via e-mail to informationssicherheit@remove-this.digitalverbund.bayern.
Additional fees and billing
- License fees on the part of the manufacturer: number of employees of the university x 0.27€/month
- Settlement of license fees via own contract with GBTEC Austria GmbH