{"id":1006164,"date":"2025-06-23T12:31:18","date_gmt":"2025-06-23T10:31:18","guid":{"rendered":"https:\/\/www.teal-consulting.de\/2025\/06\/23\/stand-der-technik-teletrust-teil-1\/"},"modified":"2025-07-02T16:10:48","modified_gmt":"2025-07-02T14:10:48","slug":"state-of-the-art-teletrust-part-1","status":"publish","type":"post","link":"https:\/\/www.teal-consulting.de\/en\/2025\/06\/23\/state-of-the-art-teletrust-part-1\/","title":{"rendered":"State of the art \u2013 Analysis of the TeleTrusT guide (Part 1\/2)"},"content":{"rendered":"
[vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern”][vc_column][vc_empty_space height=”30″][vc_row_inner row_type=”row” type=”full_width” text_align=”left” css_animation=””][vc_column_inner][vc_column_text][\/vc_column_text][vc_empty_space height=”20″][vc_column_text css=””]In our two-part series, we would like to discuss the current guidelines issued by the TeleTrusT working group and present our perspective. Let’s get started \ud83d\ude0a.[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern”][vc_column][vc_empty_space height=”50″][vc_row_inner row_type=”row” type=”full_width” text_align=”left” css_animation=””][vc_column_inner][vc_column_text css=””]\n

\u201cState of the art\u201d – PART 1<\/h2>\n

 <\/p>\n

What does \u201cstate of the art\u201d mean in IT security\u2014and why is it so important now?<\/h3>\n[\/vc_column_text][vc_empty_space height=”20″][vc_column_text css=””]The IT security situation remains tense and pressure on companies is mounting: new legal requirements such as NIS-2, DORA, the GDPR, and the upcoming NIS2UmsuCG not only demand more security measures, but also proof of compliance. At the heart of many regulations is a term that sounds clear but is anything but unambiguous: state of the art.<\/em><\/p>\n

But what does that mean in concrete terms? What measures are considered appropriate today? And how can companies prove that their protective measures comply with current standards?<\/strong><\/em><\/p>\n

Answers can be found in the recently published \u201cState of the Art\u201d report from the German Federal Association for IT Security (TeleTrusT) \ud83d\ude80<\/strong>. The annually revised guide has long been regarded by experts as a valuable guide not only for KRITIS operators, but for all organizations that want to set up their IT security in a legally compliant, effective, and future-proof manner.<\/p>\n

In the following, we will shed light on what exactly TeleTrusT understands by \u201cstate of the art,\u201d which legal requirements must be observed, which technical and organizational measures companies should really implement today, and where exactly we at Teal can provide targeted support.[\/vc_column_text][vc_empty_space height=”50″][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” css=”.vc_custom_1750675759138{padding-top: 20px !important;padding-right: 20px !important;padding-bottom: 20px !important;padding-left: 20px !important;background-color: #0156AE !important;}” z_index=””][vc_column][vc_row_inner row_type=”row” type=”full_width” text_align=”left” css_animation=””][vc_column_inner][vc_column_text css=””]\n

Who is TeleTrusT?<\/span><\/h3>\n[\/vc_column_text][vc_empty_space height=”20″][vc_column_text css=””]The German Federal Association for IT Security (Bundesverband IT-Sicherheit e.V.), better known as TeleTrusT<\/strong>, is one of the most important competence networks for IT security in Germany and Europe. The association brings together experts from business, science, government, and law and promotes exchange on current security issues. With initiatives such as the \u201cIT Security made in Germany\u201d quality mark, numerous working groups, and publications, TeleTrusT plays a key role in shaping the discussion on practical security standards.<\/span><\/p>\n

One central working group is the \u201cState of the Art\u201d working group. Its goal is to provide guidance, particularly on the question of what the state of the art means in terms of laws and regulations. The result is a regularly updated guide that systematically evaluates technical and organizational measures and supports companies in classification and implementation.<\/span>[\/vc_column_text][\/vc_column_inner][\/vc_row_inner][\/vc_column][\/vc_row][vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern”][vc_column][vc_empty_space height=”50″][vc_row_inner row_type=”row” type=”full_width” text_align=”left” css_animation=””][vc_column_inner][vc_column_text css=””]\n

What is the current state of the art?<\/h3>\n[\/vc_column_text][vc_empty_space height=”20″][vc_column_text css=””]The term \u201cstate of the art\u201d sounds objective, but in practice it is often difficult to grasp. According to TeleTrusT, it refers to the best performance available on the market for a measure that is suitable for effectively achieving legal IT protection goals such as availability, confidentiality, and integrity. It is therefore not necessarily about the latest or most innovative solution, but rather about what has proven itself in a professional environment and actually provides protection.<\/p>\n

In comparison:<\/p>\n