Die Anschläge in New York und Washington am 11

Appendix 1 
 
 
Questionnaire and checklist 
sample 
 
The baseline protection concept can only be implemented if 
theoretical knowledge on hazards, threats and risks are 
operationalised by means of corresponding management 
concepts. Both questionnaires and checklists which are easy 
to work through are increasingly being used as tools for the 
operationalisation of security concepts at international level.
This questionnaire and checklist are thus to be regarded as a 
sample
which is intended to provide a basis on which to 
implement the baseline protection concept independently 
and in a practice- and user-oriented manner. The questions 
are primarily intended to initiate and steer an intra-company 
discussion process
on how to enhance security in a 
targeted manner. The checklists are designed as a concrete 
aid and control tool for use in the course of implementation.  
 
Questionnaire 
The questionnaire is non-exhaustive but should, like the 
checklist, be expanded and developed on a cooperative 
basis.
 
Structures and cooperation projects (organisation and 
management) 
1. How are security aspects at the company structured 
and organized? What relations and cooperative 
structures exist or are planned between physical 
security, IT security and personnel security? 
2. How does the company cooperate with other 
businesses in the field of security, including other 

---

- 54 - 
infrastructure users, such as in regional associations, 
and with private providers of services to be outsourced?
3. What security measures and cooperation structures 
exist or are planned in the field of up- and down-stream 
elements of the valued-added chains? What other 
cooperation arrangements are in place to cope with 
major incidents? What arrangements apply with regard 
to cooperation with involved security authorities and 
rescue and disaster management organisations, and 
how is such cooperation evaluated? 
4. Which company units, institutions of the relevant 
business sector and supervisory authorities and which 
external institutions are concerned with the analysis of 
cases of damage (reconstruction of causes, 
conclusions, implementation of measures and 
monitoring of success) and, on the basis of such 
analysis, with further development measures, e.g. in the 
field of technical security?