T 2.94 Inadequate planning of the use of IIS

This threat was eliminated in 2011 with the 12th version of the IT-Grundschutz Catalogues.