How is a Basis-Sicherheitscheck prepared organizationally?

Sight existing documents, involve external parties, pick interview partners matching the layer model, and schedule the interviews.

Organizational preparation steps:

1. Review existing documents (existing concepts, guidelines, previous audits)
2. Clarify/organize involvement of external parties — providers, outsourcing partners etc. (they implement many measures and must answer for them)
3. Determine interview partners according to the layer model:
   • Overarching aspects → HR department, concept owners
   • Infrastructure → facility management (Haustechnik), possibly externals
   • IT systems / networks → system and network administrators
   • IT applications → application owners
4. Plan the interview schedule

The mapping of interviewees to layers is the practical trick: each block family has a natural "who would know" — asking the right person makes the Soll-Ist comparison fast and credible.