OrgEh - Organisationseinheiten/en

A company consists of organizational units that participate in the individual processing procedures. These in turn take place in one to several organizational units. The creation and processing of data takes place in these organizational units during the individual process steps predominantly IT-supported and with the use of IT systems.
The more critical the organizational unit, the greater the potential damage, and the greater the requirements for availability, confidentiality and integrity of the data or systems.

The structure of an OrgUn should be hierarchical.

Important: To be able to use organizational units in a management system, they must be activated for the active analysis period! When a new organizational unit is created, it is automatically assigned to all active (current) analysis periods and thereby activated, if this organizational unit has been subordinated to another one and this superordinate organizational unit is already activated in the respective management system. If there is no parent organizational unit, then the newly created organizational unit will not be automatically activated in all management systems. For more information, see "Administration → Management System → Analysis Periods".

Display from structural analysis from risk management

Create / edit / delete organizational unit

Organizational units can be created or edited by administrators and experts via "Administration -> OrgUn".

Organizational structures mask

To create a new organizational unit, click the "Plus" button.

To edit an existing organizational unit, double-click the corresponding organizational unit.

Mask to edit / create an organizational unit

Abbreviation and designation:

• For the abbreviation, enter how the OrgUn should be abbreviated.
• For the designation, enter the designation of the OrgUn

Sort order:
.

• This defines how the OrgUn are listed in linear lists (e.g. in a report).

Superordinate OrgUn:
.

• Here you enter to which GmbH a department belongs.

Type:

• Here you specify what type of organizational unit it is.

- Group

- Company

- Department

- Entity

Sparte:

• Hier legen Sie fest in welchen Sparten die Organisationseinheit aktiv ist.

Responsible:

• The person entered here is responsible for the OrgUn. For example, it is the head of a department.

Description:

• Here you should describe the OrgUn.

Active from / to
.

• Here you can enter how long an OrgUn should be active in HITGuard.

ID in third-party systems:

• This field can be used to synchronize an organizational unit with a third-party system. Synchronization requires an import in which the same ID is set.

Hazard layers:

All hazard layers of the organizational unit are listed here. It is not possible to assign hazard layers here. More about hazard layers can be found here.

Address:

• Here you can enter the address of the OrgUn.

Delete OrgUn:

• To delete, click on the red trash can in the edit screen.
• To be able to delete an OrgUn, all assigned tasks, control definitions and processing messages must first be deleted.

Data protection management system

If the active management system is the data protection management system, it is also possible to record the contact data of the data protection officer of the organizational unit. These are required for evaluation in data protection management.

If no data protection officer is found during evaluations for an organizational unit, the officer of the higher-level organizational unit is used. This means that if there is only one officer in the organizational structure, this officer only has to be entered in the top organizational unit.

Data Protection Officer

Deviations / measures / controls

The behavior is the same as for resources. More about this here.

Auditinformation

Im Tab "Auditinformation" kann man zusätzliche Informationen festhalten die im Kontext von Audits relevant sind.

• Mitarbeiter Anzahl:

Hier kann die Anzahl der Mitarbeiter festgehalten werden.

• Lokaler Managementbeauftragter:

Dies ist der Auditkoordinator und Ansprechpartner der je Organisationseinheit vom Typ Gesellschaft festgelegt werden sollte.

• "Vorschlag diese OrgEh jährlich zu auditieren":

Hat aktuell noch keine Funktion!

• Zertifizierungen:

Hier können Normen (aus Standards und Normen) ausgewählt und zugewiesen werden, nach denen die Organisationseinheit zertifiziert ist. Zu diesen Normen kann dann jeweils eine Reg.-Nr. sowie eine Standortnummer erfasst werden.

Sparten

Divisions

Organizational units can be assigned to several divisions depending on their field of activity.

Under "Administartion → Edit Organsiation Units | Divisions" these divisions can be managed.

Divisions

Create / edit division

A new division can be created by clicking the "Plus" button.

By double-clicking on a division, it can be edited.

Edit division