6.5.1 The relevant entities shall establish, implement and apply a policy and procedures for security …

Requirement

The relevant entities shall establish, implement and apply a policy and procedures for security testing.

Guidance

• Take into account industry-recognised standards when developing the testing policy (56).
• Establish and maintain a testing programme appropriate to the entity’s size, complexity and maturity (57).

Examples of evidence

• Documented security testing and procedures based on relevant standards and good practices.
• Guidelines and standards that the entity adheres to for conducting security tests.

1. Vue d’ensemble

1.1 Références

1.2 Exigences identifiées

1.3 Réglementations associées

2. Exigences identifiées

3. Réglementations associées

Tickets liés

• ENISA -