Navigation and service

HA Benchmark

The HA Benchmark is an evaluation scheme that is used to determine the reliability of an IT service or a data centre. The term "reliability" describes the expectation that an IT service or a data centre will fulfil its required functions. This expectation must be verifiable and comprehensible from the outset. Reliability is a measure of the quality of IT services. Reliability encompasses information security, but also goes beyond this. It includes, for example, the evaluation of relevant aspects from the areas of Governance or IT service management.

The evaluation and measurement are done with the aid of some 94 particularly relevant aspects of reliability (called "indicators") using maturity models. In practice, an extensive list of questions is used to check what maturity level an IT service or a data centre reaches in relation to a particular indicator.

The HA Benchmark provides a structured process that requires a reasonable amount of time and resources and enables a statement to be made regarding the reliability of IT services. The HA Benchmark uses the set of instruments from the High Availability Compendium and the IT-Grundschutz. In addition, the HA Benchmark is expanded to include selected elements of proven standards, such as COBIT and ITIL.

Schaubild: Aspekte des Hochverfügbarkeits-Benchmarks Schaubild HV-Benchmark
Abbildung 1: Alle 94 Indikatoren der organisatorischen und technischen Aspekte des HV-Benchmarks Source: Bundesamt für Sicherheit in der Informationstechnik

The graphic provides an overview of all indicators and their structural arrangement within the HA Benchmark. The three domains of "Management", "IT control" und "Technical implementation" include a total of 14 sub-domains, which summarise the indicators contained within them as logical units.

The publication of the HA Benchmark (in the full version) is currently in the planning phase. An extract from the HA Benchmark has already been published in the HA Benchmark Compact. The HA Benchmark Compact has already been applied by the BSI for investigations of data centres in the Federal Administration.