+TITLE II FURTHER HARMONISATION OF ICT RISK MANAGEMENT TOOLS, METHODS, PROCESSES, AND POLICIES IN ACCORDANCE WITH ARTICLE 15 OF REGULATION (EU) 2022/2554
---+CHAPTER I ICT Security policies, procedures, protocols, and tools
------+Section 1
---------+Article 2 General elements of ICT security policies, procedures, protocols, and tools
------------+Article 2 1.
------------+Article 2 2.
------+Section 2
---------+Article 3 ICT risk management
------+Section 3 ICT asset management
---------+Article 4 ICT asset management policy
------------+Article 4 1.
------------+Article 4 2.
---------+Article 5 ICT asset management procedure
------------+Article 5 1.
------------+Article 5 2.
------+Section 4 Encryption and cryptography
---------+Article 6 Encryption and cryptographic controls
------------+Article 6 1.
------------+Article 6 2.
------------+Article 6 3.
------------+Article 6 4.
------------+Article 6 5.
---------+Article 7 Cryptographic key management
------------+Article 7 1.
------------+Article 7 2.
------------+Article 7 3.
------------+Article 7 4.
------------+Article 7 5.
------+Section 5 ICT operations security
---------+Article 8 Policies and procedures for ICT operations
------------+Article 8 1.
------------+Article 8 2.
---------+Article 9 Capacity and performance management
------------+Article 9 1.
------------+Article 9 2.
---------+Article 10 Vulnerability and patch management
------------+Article 10 1.
------------+Article 10 2.
------------+Article 10 3.
------------+Article 10 4.
---------+Article 11 Data and system security
------------+Article 11 1.
------------+Article 11 2.
---------+Article 12 Logging
------------+Article 12 1.
------------+Article 12 2.
------+Section 6 Network security
---------+Article 13 Network security management
---------+Article 14 Securing information in transit
------------+Article 14 1.
------------+Article 14 2.
------+Section 7 ICT project and change management
---------+Article 15 ICT project management
------------+Article 15 1.
------------+Article 15 2.
------------+Article 15 3.
------------+Article 15 4.
------------+Article 15 5.
---------+Article 16 ICT systems acquisition, development, and maintenance
------------+Article 16 1.
------------+Article 16 2.
------------+Article 16 3.
------------+Article 16 4.
------------+Article 16 5.
------------+Article 16 6.
------------+Article 16 7.
------------+Article 16 8.
------------+Article 16 9.
---------+Article 17 ICT change management
------------+Article 17 1.
------------+Article 17 2.
------+Section 8
---------+Article 18 Physical and environmental security
------------+Article 18 1.
------------+Article 18 2.
---+CHAPTER II Human resources policy and access control
------+Article 19 Human resources policy
------+Article 20 Identity management
---------+Article 20 1.
---------+Article 20 2.
------+Article 21 Access control
---+CHAPTER III ICT-related incident detection and response
------+Article 22 ICT-related incident management policy
------+Article 23 Anomalous activities detection and criteria for ICT-related incidents detection and response
---------+Article 23 1.
---------+Article 23 2.
---------+Article 23 3.
---------+Article 23 4.
---------+Article 23 5.
---------+Article 23 6.
---+CHAPTER IV ICT business continuity management
------+Article 24 Components of the ICT business continuity policy
---------+Article 24 1.
---------+Article 24 2.
---------+Article 24 3.
---------+Article 24 4.
------+Article 25 Testing of the ICT business continuity plans
---------+Article 25 1.
---------+Article 25 2.
---------+Article 25 3.
---------+Article 25 4.
---------+Article 25 5.
------+Article 26 ICT response and recovery plans
---------+Article 26 1.
---------+Article 26 2.
---------+Article 26 3.
---------+Article 26 4.
---+CHAPTER V Report on the ICT risk management framework review
------+Article 27 Format and content of the report on the review of the ICT risk management framework
---------+Article 27 1.
---------+Article 27 2.
|
TITLE II FURTHER HARMONISATION OF ICT RISK MANAGEMENT TOOLS, METHODS, PROCESSES, AND POLICIES IN ACCORDANCE WITH ARTICLE 15 OF REGULATION (EU) 2022/2554
TITLE II FURTHER HARMONISATION OF ICT RISK MANAGEMENT TOOLS, METHODS, PROCESSES, AND POLICIES IN ACCORDANCE WITH ARTICLE 15 OF REGULATION (EU) 2022/2554
1. Overview
1.1 References
1.2 Identified Requirements
1.3 Related Standards
2. Identified Requirements
Requirements
| Source |
Requirement |
3. Related Standards
Standards
| Source |
Requirement |
- Builddate: 25.06.2024 00:00:00 -Doknr: CELEX:32024R1774
- EULAW -
EN: Legal acts of the European Union from EUR-Lex, https://eur-lex.europa.eu/. © European Union. Re-use is authorised by Decision 2011/833/EU, provided the source is acknowledged; the consolidated texts are licensed under CC BY 4.0 (EUR-Lex legal notice). Divided into sections and converted into the GRCA format, the wording unchanged. Only the legislation published in the Official Journal of the European Union is deemed authentic.
DE: Rechtsakte der Europäischen Union aus EUR-Lex, https://eur-lex.europa.eu/. © Europäische Union. Weiterverwendung nach Beschluss 2011/833/EU mit Quellenangabe gestattet; die konsolidierten Fassungen stehen unter CC BY 4.0 (Rechtlicher Hinweis von EUR-Lex). In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert. Verbindlich sind allein die im Amtsblatt der Europäischen Union veröffentlichten Rechtsakte.
|