![](data:image/svg+xml,<svg display="block" id="2531834213" role="presentation" viewBox="0 0 36 36" xmlns="http://www.w3.org/2000/svg"><path d="M 8.667 0 L 8.667 26 M 17.333 0 L 17.333 26 M 2.889 0 L 23.111 0 C 24.707 0 26 1.293 26 2.889 L 26 23.111 C 26 24.707 24.707 26 23.111 26 L 2.889 26 C 1.293 26 0 24.707 0 23.111 L 0 2.889 C 0 1.293 1.293 0 2.889 0 Z" fill="transparent" height="26px" id="lW5iyUDYU" stroke-dasharray="" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5" stroke="rgb(0, 0, 0)" transform="translate(5 5)" width="26px"/></svg>)
What Is an IT Security Concept in IT Tenders (IT-Sicherheitskonzept, Germany)?
This is a German procurement term. The document, required in IT tenders, covering the technical and organisational information-security measures.
What is an IT-Sicherheitskonzept?
The document describing the technical and organisational measures that protect the information security of the system being procured, often based on the BSI's IT-Grundschutz.
When is it required?
In IT tenders, usually as part of the bid or before contract signature. Public bodies must meet security standards, and the supplier's concept shows how the solution does.
What does the buyer check?
Whether the concept covers the required protection level, is specific to the system offered, and is backed by evidence such as certifications.
