3.4.1 The relevant entities shall assess suspicious events to determine whether they constitute incidents …

Requirement

The relevant entities shall assess suspicious events to determine whether they constitute incidents and, if so, determine their nature and severity.

Guidance

• Use criteria to assess whether a suspicious event is an incident or not. The guidance in section 3.1.2 provides an indicative, non-exhaustive list of such criteria.
• Determine the nature and severity of the event based on a categorisation system referred to in point 3.1.2 (a) of the Annex to the regulation.

Examples of evidence

• Defined criteria in place.
• A categorisation system referred to in point 3.1.2 (a) of the Annex to the regulation .

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• ENISA -