+12.1. Asset classification
---+12.1.1. For the purpose of Article 21(2), point (i) of Directive (EU) 2022/2555, the relevant …
---+12.1.2. For the purpose of point 12.1.1, the relevant entities shall: (a) lay down a system of …
---+12.1.3. The relevant entities shall conduct periodic reviews of the classification levels of assets …
|
12.1. Asset classification
12.1. Asset classification
1. Vue d’ensemble
| Intitulé |
Réglementation |
|
12.1.1. For the purpose of Article 21(2), point (i) of Directive (EU) 2022/2555, the relevant …
|
|
12.1.1.
|
For the purpose of Article 21(2), point (i) of Directive (EU) 2022/2555, the relevant entities shall lay down classification levels of all assets, including information, in scope of their network and information systems for the level of protection required.
|
|
|
12.1.2. For the purpose of point 12.1.1, the relevant entities shall: (a) lay down a system of …
|
|
12.1.2.
|
For the purpose of point 12.1.1, the relevant entities shall:
|
(a)
|
lay down a system of classification levels for assets;
|
|
(b)
|
associate all assets with a classification level, based on confidentiality, integrity, authenticity and availability requirements, to indicate the protection required according to their sensitivity, criticality, risk and business value;
|
|
(c)
|
align the availability requirements of the assets with the delivery and recovery objectives set out in their business continuity and disaster recovery plans.
|
|
|
|
12.1.3. The relevant entities shall conduct periodic reviews of the classification levels of assets …
|
|
12.1.3.
|
The relevant entities shall conduct periodic reviews of the classification levels of assets and update them, where appropriate.
|
|
,
1.1 Références
1.2 Exigences identifiées
1.3 Normes associées
2. Exigences identifiées
Exigences
| Source |
Exigence |
3. Normes associées
Tickets liés
|