6.5.1 The relevant entities shall establish, implement and apply a policy and procedures for security …

Requirement

The relevant entities shall establish, implement and apply a policy and procedures for security testing.

Guidance

• Take into account industry-recognised standards when developing the testing policy (56).
• Establish and maintain a testing programme appropriate to the entity’s size, complexity and maturity (57).

Examples of evidence

• Documented security testing and procedures based on relevant standards and good practices.
• Guidelines and standards that the entity adheres to for conducting security tests.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

3. Related Regulations

Linked Issues

• ENISA -