What are the steps of the Realisierungsplanung (implementation planning) in IT-Grundschutz?

Sift results → consolidate measures → estimate effort → set the order → assign owners and deadlines → add awareness/training — producing the realization plan.

* The six Realisierungsplanung steps — Sichten → Konsolidieren → Aufwand → Reihenfolge → Verantwortliche & Termine → begleitende Maßnahmen. *

The missing measures from the Basis-Sicherheitscheck become an actionable plan:

1. Sichten — compile the missing security measures
2. Konsolidieren — strike superfluous measures, concretize the rest → measure list
3. Aufwand schätzen — estimate costs: financial and personnel, one-off and recurring
4. Umsetzungsreihenfolge festlegen — sequence them: first those that are prerequisites for others
5. Verantwortliche und Termine bestimmen — for each measure: an owner and a deadline for implementation and for monitoring
6. Begleitende Massnahmen — accompanying awareness and training measures

Result: the Realisierungsplan — typically a table of measures with priority, owner, deadline, status.

Tip: Steps 5–6 separate paper concepts from real security: a measure without an owner and date is a wish, not a plan.