AM-09.02B

Classification levels are reviewed at least annually and in case of significant changes to the cloud service. Based on the review, the classification levels are updated where appropriate.

Supplementary information

If the cloud service provider does not categorise the assets specifically, then all assets may be treated as requiring the highest level of protection needs.

Supplementary information

If a review is caused by significant changes to the cloud service, only the classification levels affected by the changes need to be included in the review.

1. Resumen

1.1 Referencias

1.2 Requisitos identificados

1.3 Regulaciones relacionadas

2. Requisitos identificados

3. Regulaciones relacionadas

Incidencias vinculadas

• BSI -

  Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)