3.4.1 The relevant entities shall assess suspicious events to determine whether they constitute incidents …

Requirement

The relevant entities shall assess suspicious events to determine whether they constitute incidents and, if so, determine their nature and severity.

Guidance

• Use criteria to assess whether a suspicious event is an incident or not. The guidance in section 3.1.2 provides an indicative, non-exhaustive list of such criteria.
• Determine the nature and severity of the event based on a categorisation system referred to in point 3.1.2 (a) of the Annex to the regulation.

Examples of evidence

• Defined criteria in place.
• A categorisation system referred to in point 3.1.2 (a) of the Annex to the regulation .

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

3. Réglementations associées

Tickets liés

• ENISA -