IT risk management: Protection requirements analysis for IT systems and individual data processing, identity and access management

1. Protection requirements analysis: identifying IT applications that require protection, on the basis of a catalog of criteria, and introducing targeted measures for reducing potential risks.   2. Individual data processing: introducing a control process for developing, testing, approving and implementing in production processes in order to safeguard data security.   3. Identity and access management (IAM): introducing a suitable IT authorization method that ensures that all employees only have the rights that they require to perform their specific tasks and that comply with the MaRisk requirements.