+10.4. Disciplinary process
---+10.4.1. The relevant entities shall establish, communicate and maintain a disciplinary process for …
---+10.4.2. The relevant entities shall review and, where appropriate, update the disciplinary process …

10.4. Disciplinary process

10.4.   Disciplinary process

1. Overview

,
Summary Regulation
10.4.1. The relevant entities shall establish, communicate and maintain a disciplinary process for …

10.4.1.

The relevant entities shall establish, communicate and maintain a disciplinary process for handling violations of network and information system security policies. The process shall take into consideration relevant legal, statutory, contractual and business requirements.
10.4.2. The relevant entities shall review and, where appropriate, update the disciplinary process …

10.4.2.

The relevant entities shall review and, where appropriate, update the disciplinary process at planned intervals, and when necessary due to legal changes or significant changes to operations or risks.

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

Requirements
Source Requirement

3. Related Standards

Standards
Source Requirement

Linked Issues

Issuelinks
Linktype Issue
is related to 10.4 Disciplinary process