Entwicklung eines Vorgehensmodells zu Ableitung von Anforderungen aus Normdokumenten für die Fallstudie ISMS-Tool, ISO/IEC 27001 und TISAX®

This thesis presents a process model for deriving context-based requirements from standard documents with the aim of significantly improving the efficiency, traceability and reusability of requirements engineering for standard documents. The impetus for this work stems from the need for companies to obtain ISO/IEC 27001 certification and maintain TISAX® certification as well as to standardize certain subject areas. The aim is to develop a structured process model that enables the derivation of requirements from different standards and thus facilitates the evaluation of different ISMS tools on the market. The expected benefit of this work is the provision of a practical tool for the selection of suitable ISMS tools, which serves as support in the fulfilment of standard conformity. The activity includes the implementation and adaptation of the process model to the case study, applying the developed approach and evaluating the suitability of different ISMS tools. This work thus makes a significant contribution to the standardization and optimization of processes around requirements elicitation and standards compliance by creating a transparent and accessible basis for the context-based derivation of requirements from standard documents and supporting organizations in improving their security systems.