+TITLE III SIMPLIFIED ICT RISK MANAGEMENT FRAMEWORK FOR FINANCIAL ENTITIES REFERRED TO IN ARTICLE 16(1) OF REGULATION (EU) 2022/2554
---+CHAPTER I Simplified ICT risk management framework
------+Article 28 Governance and organisation
---------+Article 28 1.
---------+Article 28 2.
---------+Article 28 3.
---------+Article 28 4.
---------+Article 28 5.
---------+Article 28 6.
------+Article 29 Information security policy and measures
---------+Article 29 1.
---------+Article 29 2.
------+Article 30 Classification of information assets and ICT assets
---------+Article 30 1.
---------+Article 30 2.
------+Article 31 ICT risk management
---------+Article 31 1.
---------+Article 31 2.
---------+Article 31 3.
---------+Article 31 4.
------+Article 32 Physical and environmental security
---------+Article 32 1.
---------+Article 32 2.
---------+Article 32 3.
---+CHAPTER II Further elements of systems, protocols, and tools to minimise the impact of ICT risk
------+Article 33 Access Control
------+Article 34 ICT operations security
------+Article 35 Data, system and network security
------+Article 36 ICT security testing
---------+Article 36 1.
---------+Article 36 2.
---------+Article 36 3.
------+Article 37 ICT systems acquisition, development, and maintenance
------+Article 38 ICT project and change management
---------+Article 38 1.
---------+Article 38 2.
---+CHAPTER III ICT business continuity management
------+Article 39 Components of the ICT business continuity plan
---------+Article 39 1.
---------+Article 39 2.
------+Article 40 Testing of business continuity plans
---------+Article 40 1.
---------+Article 40 2.
---------+Article 40 3.
---+CHAPTER IV Report on the review of the simplified ICT risk management framework
------+Article 41 Format and content of the report on the review of the simplified ICT risk management framework
---------+Article 41 1.
---------+Article 41 2.

TITLE III SIMPLIFIED ICT RISK MANAGEMENT FRAMEWORK FOR FINANCIAL ENTITIES REFERRED TO IN ARTICLE 16(1) OF REGULATION (EU) 2022/2554

TITLE III SIMPLIFIED ICT RISK MANAGEMENT FRAMEWORK FOR FINANCIAL ENTITIES REFERRED TO IN ARTICLE 16(1) OF REGULATION (EU) 2022/2554

1. Overview

,
CHAPTER I Simplified ICT risk management framework CHAPTER I Simplified ICT risk management framework
CHAPTER II Further elements of systems, protocols, and tools to minimise the impact of ICT risk CHAPTER II Further elements of systems, protocols, and tools to minimise the impact of ICT risk
CHAPTER III ICT business continuity management CHAPTER III ICT business continuity management
CHAPTER IV Report on the review of the simplified ICT risk management framework CHAPTER IV Report on the review of the simplified ICT risk management framework

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

Requirements

3. Related Standards

Standards
  • Builddate: 25.06.2024 00:00:00 -Doknr: CELEX:32024R1774
  • EULAW -

    EN: Legal acts of the European Union from EUR-Lex, https://eur-lex.europa.eu/. © European Union. Re-use is authorised by Decision 2011/833/EU, provided the source is acknowledged; the consolidated texts are licensed under CC BY 4.0 (EUR-Lex legal notice). Divided into sections and converted into the GRCA format, the wording unchanged. Only the legislation published in the Official Journal of the European Union is deemed authentic.

    DE: Rechtsakte der Europäischen Union aus EUR-Lex, https://eur-lex.europa.eu/. © Europäische Union. Weiterverwendung nach Beschluss 2011/833/EU mit Quellenangabe gestattet; die konsolidierten Fassungen stehen unter CC BY 4.0 (Rechtlicher Hinweis von EUR-Lex). In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert. Verbindlich sind allein die im Amtsblatt der Europäischen Union veröffentlichten Rechtsakte.