+11.1. Access control policy
---+11.1.1. For the purpose of Article 21(2), point (i) of Directive (EU) 2022/2555, the relevant …
---+11.1.2. The policies referred to in point 11.1.1. shall: (a) address access by persons, including …
---+11.1.3. The relevant entities shall review and, where appropriate, update the policies at planned …
|
11.1. Access control policy
11.1. Access control policy
1. Ülevaade
| Pealkiri |
Regulatsioon |
|
11.1.1. For the purpose of Article 21(2), point (i) of Directive (EU) 2022/2555, the relevant …
|
|
11.1.1.
|
For the purpose of Article 21(2), point (i) of Directive (EU) 2022/2555, the relevant entities shall establish, document and implement logical and physical access control policies for the access to their network and information systems, based on business requirements as well as network and information system security requirements.
|
|
|
11.1.2. The policies referred to in point 11.1.1. shall: (a) address access by persons, including …
|
|
11.1.2.
|
The policies referred to in point 11.1.1. shall:
|
(a)
|
address access by persons, including staff, visitors, and external entities such as suppliers and service providers;
|
|
(b)
|
address access by network and information systems;
|
|
(c)
|
ensure that access is only granted to users that have been adequately authenticated.
|
|
|
|
11.1.3. The relevant entities shall review and, where appropriate, update the policies at planned …
|
|
11.1.3.
|
The relevant entities shall review and, where appropriate, update the policies at planned intervals and when significant incidents or significant changes to operations or risks occur.
|
|
,
1.1 Viited
1.2 Tuvastatud nõuded
1.3 Seotud standardid
2. Tuvastatud nõuded
3. Seotud standardid
Lingitud teemad
|