+2.2. Compliance monitoring
---+2.2.1. The relevant entities shall regularly review the compliance with their policies on network …
---+2.2.2. The relevant entities shall put in place an effective compliance reporting system which …
---+2.2.3. The relevant entities shall perform the compliance monitoring at planned intervals and when …

2.2. Compliance monitoring

2.2.   Compliance monitoring

1. Vue d’ensemble

,
2.2.1. The relevant entities shall regularly review the compliance with their policies on network …

2.2.1.

 The relevant entities shall regularly review the compliance with their policies on network and information system security, topic-specific policies, rules, and standards. The management bodies shall be informed of the status of network and information security on the basis of the compliance reviews by means of regular reporting.
2.2.2. The relevant entities shall put in place an effective compliance reporting system which …

2.2.2.

 The relevant entities shall put in place an effective compliance reporting system which shall be appropriate to their structures, operating environments and threat landscapes. The compliance reporting system shall be capable to provide to the management bodies an informed view of the current state of the relevant entities’ management of risks.
2.2.3. The relevant entities shall perform the compliance monitoring at planned intervals and when …

2.2.3.

 The relevant entities shall perform the compliance monitoring at planned intervals and when significant incidents or significant changes to operations or risks occur.

1.1 Références

1.2 Exigences identifiées

1.3 Normes associées

2. Exigences identifiées

Exigences

3. Normes associées

Normes

Tickets liés

Liens
is related to 2.2 Compliance monitoring
is related to 2.2 and the monitoring and measurement pursuant to point 7, shall be reported to the management bodies. …