Supporting Programme 2018
c.a.p.e. IT - The CMDB in the context of critical infrastructures
One of the most important sources of information for the IT service is the Configuration Management Database (CMDB). The database contains information on servers, desktops, network infrastructure or locations. The federal KRITIS programme for the protection of critical infrastructures brings physical protection and IT security closer together. As a result, the technical equipment is growing together and the CMDB is becoming increasingly important. Therefore this is enriched beyond IT with information on building services engineering, control technology or, in the health sector, medical equipment technology.
The presentation considers the CMDB of the Service Management System KIX in the context of critical infrastructures. The interaction with SerNet's verinice IT Security Management System will also be highlighted. Both are open source systems specialized for their purposes. From the point of view of merging all information for security management and audits, the integration of the processes in security management into those of the classic IT service is taken up in practice and necessary, tangential aspects such as regular technical maintenance, the documentation of operator instructions or device logbooks are explained.
--- Date: 10.10.2018 Time: 4:15 PM - 4:30 PM Location: Forum M9 - Management