+TITLE II FURTHER HARMONISATION OF ICT RISK MANAGEMENT TOOLS, METHODS, PROCESSES, AND POLICIES IN ACCORDANCE WITH ARTICLE 15 OF REGULATION (EU) 2022/2554
---+CHAPTER I ICT Security policies, procedures, protocols, and tools
------+Section 1
---------+Article 2 General elements of ICT security policies, procedures, protocols, and tools
------------+Article 2 1.
------------+Article 2 2.
------+Section 2
---------+Article 3 ICT risk management
------+Section 3 ICT asset management
---------+Article 4 ICT asset management policy
------------+Article 4 1.
------------+Article 4 2.
---------+Article 5 ICT asset management procedure
------------+Article 5 1.
------------+Article 5 2.
------+Section 4 Encryption and cryptography
---------+Article 6 Encryption and cryptographic controls
------------+Article 6 1.
------------+Article 6 2.
------------+Article 6 3.
------------+Article 6 4.
------------+Article 6 5.
---------+Article 7 Cryptographic key management
------------+Article 7 1.
------------+Article 7 2.
------------+Article 7 3.
------------+Article 7 4.
------------+Article 7 5.
------+Section 5 ICT operations security
---------+Article 8 Policies and procedures for ICT operations
------------+Article 8 1.
------------+Article 8 2.
---------+Article 9 Capacity and performance management
------------+Article 9 1.
------------+Article 9 2.
---------+Article 10 Vulnerability and patch management
------------+Article 10 1.
------------+Article 10 2.
------------+Article 10 3.
------------+Article 10 4.
---------+Article 11 Data and system security
------------+Article 11 1.
------------+Article 11 2.
---------+Article 12 Logging
------------+Article 12 1.
------------+Article 12 2.
------+Section 6 Network security
---------+Article 13 Network security management
---------+Article 14 Securing information in transit
------------+Article 14 1.
------------+Article 14 2.
------+Section 7 ICT project and change management
---------+Article 15 ICT project management
------------+Article 15 1.
------------+Article 15 2.
------------+Article 15 3.
------------+Article 15 4.
------------+Article 15 5.
---------+Article 16 ICT systems acquisition, development, and maintenance
------------+Article 16 1.
------------+Article 16 2.
------------+Article 16 3.
------------+Article 16 4.
------------+Article 16 5.
------------+Article 16 6.
------------+Article 16 7.
------------+Article 16 8.
------------+Article 16 9.
---------+Article 17 ICT change management
------------+Article 17 1.
------------+Article 17 2.
------+Section 8
---------+Article 18 Physical and environmental security
------------+Article 18 1.
------------+Article 18 2.
---+CHAPTER II Human resources policy and access control
------+Article 19 Human resources policy
------+Article 20 Identity management
---------+Article 20 1.
---------+Article 20 2.
------+Article 21 Access control
---+CHAPTER III ICT-related incident detection and response
------+Article 22 ICT-related incident management policy
------+Article 23 Anomalous activities detection and criteria for ICT-related incidents detection and response
---------+Article 23 1.
---------+Article 23 2.
---------+Article 23 3.
---------+Article 23 4.
---------+Article 23 5.
---------+Article 23 6.
---+CHAPTER IV ICT business continuity management
------+Article 24 Components of the ICT business continuity policy
---------+Article 24 1.
---------+Article 24 2.
---------+Article 24 3.
---------+Article 24 4.
------+Article 25 Testing of the ICT business continuity plans
---------+Article 25 1.
---------+Article 25 2.
---------+Article 25 3.
---------+Article 25 4.
---------+Article 25 5.
------+Article 26 ICT response and recovery plans
---------+Article 26 1.
---------+Article 26 2.
---------+Article 26 3.
---------+Article 26 4.
---+CHAPTER V Report on the ICT risk management framework review
------+Article 27 Format and content of the report on the review of the ICT risk management framework
---------+Article 27 1.
---------+Article 27 2.
|
TITLE II FURTHER HARMONISATION OF ICT RISK MANAGEMENT TOOLS, METHODS, PROCESSES, AND POLICIES IN ACCORDANCE WITH ARTICLE 15 OF REGULATION (EU) 2022/2554
TITLE II FURTHER HARMONISATION OF ICT RISK MANAGEMENT TOOLS, METHODS, PROCESSES, AND POLICIES IN ACCORDANCE WITH ARTICLE 15 OF REGULATION (EU) 2022/2554
1. Overview
1.1 References
1.2 Identified Requirements
1.3 Related Standards
2. Identified Requirements
Requirements
| Source |
Requirement |
3. Related Standards
Standards
| Source |
Requirement |
|