Schools are required by law to regulate information security and privacy (IBP). The IBP approach helps you get started as practically as possible. So that you can properly comply with the General Data Protection Regulation (AVG). IBP uses the generic international standards framework for information security ISO27001 and its derived set of best practices ISO 27002. IBP's operational assessment framework is derived from ISO 27002. This standards framework has been enriched into an assessment framework by adding evidence.
