Document once instead of ten times
Data centre, network or directory service are documented where they are operated. Connected organisations adopt that status instead of retelling it.
ISMS & Risk
Inherited Base Services
Centrally provided, documented once, recognised everywhere
When a central IT provider runs the data centre, every connected organisation today documents the same requirements again – and none can prove the status is still current. Inherited base services turn that around: the provider publishes its target object including implementation status, connected tenants bind the service and inherit the relevant requirements read-only. Any change at the provider takes effect immediately.
BSI IT-GrundschutzOSCAL
Features
Your benefits
Visible in the cockpit, not in an appendix
In the IT-Grundschutz cockpit, in modelling and in the compliance check, inherited requirements show "implemented by" with the provider name.
Cleanly mapped to OSCAL
The binding appears in the security plan as a leveraged authorization with system component; the export carries by-components with inherited per requirement.
Privacy boundary built in
Connected tenants see the name, public description and implementation status – never the provider internal rationale, owners or evidence.
Result
The group documents its shared foundation once – and every organisation can evidence the exact status it inherited.
Experience Inherited Base Services live
Schedule a no-obligation demo – we will show you the module with your own use cases.