Taking a holistic view of IT security
The relevant aspects of information/IT security can be analysed in a modular benchmark in order to answer the question of the appropriateness of IT security levels and costs.
- Information security
- IT risk management
- Business continuity
- IT security
- Central IT security services and processes
- Client security
- Network security
- Infrastructure / platform security
- Application security

Cost
How do the costs for information/IT security compare on the market?
- Effort and costs for the Information Security Management System (ISMS)
- Effort and costs for ensuring operations
- Costs (or prices) for security services, e.g. Security Information and Event Management (SIEM), Security Operations Centre (SOC), Endpoint Detection and Response (EDR), Secure Access Service Edge (SASE)
- Make or buy?
IT security level
What level of maturity and coverage does information/IT security achieve?
- Maturity level of processes
- Degree of implementation of measures
- Degree of coverage of areas, processes and services