+4.3. Crisis management
---+4.3.1. The relevant entities shall put in place a process for crisis management.
---+4.3.2. The relevant entities shall ensure that the crisis management process addresses at least the …
---+4.3.3. The relevant entities shall implement a process for managing and making use of information …
---+4.3.4. The relevant entities shall test, review and, where appropriate, update the crisis …
|
4.3. Crisis management
4.3. Crisis management
1. Overview
| Summary |
Regulation |
|
4.3.1. The relevant entities shall put in place a process for crisis management.
|
|
4.3.1.
|
The relevant entities shall put in place a process for crisis management.
|
|
|
4.3.2. The relevant entities shall ensure that the crisis management process addresses at least the …
|
|
4.3.2.
|
The relevant entities shall ensure that the crisis management process addresses at least the following elements:
|
(a)
|
roles and responsibilities for personnel and, where appropriate, suppliers and service providers, specifying the allocation of roles in crisis situations, including specific steps to follow;
|
|
(b)
|
appropriate communication means between the relevant entities and relevant competent authorities;
|
|
(c)
|
application of appropriate measures to ensure the maintenance of network and information system security in crisis situations.
|
For the purpose of point (b), the flow of information between the relevant entities and relevant competent authorities shall include both obligatory communications, such as incident reports and related timelines, and non-obligatory communications.
|
|
|
4.3.3. The relevant entities shall implement a process for managing and making use of information …
|
|
4.3.3.
|
The relevant entities shall implement a process for managing and making use of information received from the CSIRTs or, where applicable, the competent authorities, concerning incidents, vulnerabilities, threats or possible mitigation measures.
|
|
|
4.3.4. The relevant entities shall test, review and, where appropriate, update the crisis …
|
|
4.3.4.
|
The relevant entities shall test, review and, where appropriate, update the crisis management plan on a regular basis or following significant incidents or significant changes to operations or risks.
|
|
,
1.1 References
1.2 Identified Requirements
1.3 Related Standards
2. Identified Requirements
Requirements
| Source |
Requirement |
3. Related Standards
Standards
| Source |
Requirement |
Linked Issues
- Builddate: 18.10.2024 00:00:00 -Doknr: CELEX:32024R2690
- EULAW -
EN: Legal acts of the European Union from EUR-Lex, https://eur-lex.europa.eu/. © European Union. Re-use is authorised by Decision 2011/833/EU, provided the source is acknowledged; the consolidated texts are licensed under CC BY 4.0 (EUR-Lex legal notice). Divided into sections and converted into the GRCA format, the wording unchanged. Only the legislation published in the Official Journal of the European Union is deemed authentic.
DE: Rechtsakte der Europäischen Union aus EUR-Lex, https://eur-lex.europa.eu/. © Europäische Union. Weiterverwendung nach Beschluss 2011/833/EU mit Quellenangabe gestattet; die konsolidierten Fassungen stehen unter CC BY 4.0 (Rechtlicher Hinweis von EUR-Lex). In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert. Verbindlich sind allein die im Amtsblatt der Europäischen Union veröffentlichten Rechtsakte.
|