+Article 7 2

Article 7 2

2.   Costs and losses referred to in paragraph 1 shall not include costs that are necessary for the day-to-day operation of the business, in particular the following:

(a)

costs for general maintenance of infrastructure, equipment, hardware and software, and costs for keeping skills of staff up to date;

(b)

internal or external costs to enhance the business after the incident, including upgrades, improvements and risk assessment initiatives;

(c)

insurance premiums.

1. Overview

,

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

Requirements

3. Related Standards

Standards