The documentation of the technical systems used is an essential part of the data protection and security requirements. These systems are significantly involved in the processing of personal data and must therefore be documented in a comprehensible manner.

In addition, the Art. 32 GDPRthat companies take appropriate technical and organisational measures (TOM) to protect personal data. In order to plan and implement these measures effectively, it is first necessary to identify the technical systems involved and their security risks.

Systematic recording of the IT landscape makes this possible, recognise potential risks at an early stage and derive suitable protective measures. This is particularly important in connection with vulnerability management and risk assessment: Which systems are affected? What security gaps exist? Have these already been dealt with or are there acute risks?

Anyva supports companies in documenting the technical systems used in detail. In addition to a complete list of systems and assets, Anyva provides a risk assessment that is dynamically derived from the analysis of existing vulnerabilities. This not only minimises the Legal obligation to provide evidence The new system not only fulfils the requirements of the IT security standard, but also creates a sound basis for decision-making for the improvement of IT security.