+Airteagal 12 2.

Airteagal 12 2.

Sna nósanna imeachta, prótacail agus uirlisí logála dá dtagraítear i mír 1 beidh na nithe uile seo a leanas:

(a) 

sainaithneofar na teagmhais atá le logáil, tréimhse choinneála na logaí agus na bearta chun na sonraí loga a dhaingniú agus a láimhseáil, agus breithniú á dhéanamh ar an gcríoch ar chuici a cruthaíodh na logaí;

(b) 

déanfar leibhéal mionsonraí na logaí a ailíniú lena gcríoch agus lena n-úsáid chun go mbeifear in ann gníomhaíochtaí aimhrialta dá dtagraítear in Airteagal 24 a bhrath go héifeachtach;

(c) 

an ceanglas go logálfar teagmhais a bhaineann le gach ceann de na nithe seo a leanas:

(i) 

rialú rochtana loighciúla agus fisicí, dá dtagraítear in Airteagal 21, agus bainistiú céannachta;

(ii) 

an toilleadh a bhainistiú;

(iii) 

athruithe a bhainistiú;

(iv) 

oibríochtaí TFC, lena n-áirítear gníomhaíochtaí córais TFC;

(v) 

gníomhaíochtaí tráchta gréasáin, lena n-áirítear feidhmíocht gréasáin TFC;

(d) 

bearta chun córais logála agus faisnéis logála a chosaint ar athrú calaoiseach, scriosadh agus rochtain neamhúdaraithe agus iad á stóráil, faoi bhealach agus, i gcás inarb ábhartha, in úsáid;

(e) 

bearta chun teip córas logála a bhrath;

(f) 

gan dochar d’aon cheanglas rialála is infheidhme faoi dhlí an Aontais nó faoin dlí náisiúnta, cloig gach ceann de chórais TFC an eintitis airgeadais a shioncronú de réir foinse ama tagartha iontaofa dhoiciméadaithe.

Chun críocha phointe (a), bunóidh eintitis airgeadais an tréimhse choinneála, agus na cuspóirí gnó agus slándála faisnéise, an chúis le taifeadadh an teagmhais sna logaí agus torthaí an mheasúnaithe riosca TFC á gcur san áireamh acu.

1. Forbhreathnú

,

1.1 Tagairtí

1.2 Ceanglais aitheanta

1.3 Caighdeáin ghaolmhara

2. Ceanglais aitheanta

Ceanglais

3. Caighdeáin ghaolmhara

Caighdeáin
NOREA Security Monitoring (SIEM)

Put in place mechanisms to detect anomalous activities, including network performance issues, incidents (reported by the third-parties in the services that they provide), and potential material single points of failure. The mechanisms shall enable multi-layers of control, define alerting thresholds, monitoring on specific events and criteria to automatically trigger incident response. Identify and implement tools generating alerts of anomalous activities and behaviour, at least for ICT assets and information assets supporting critical or important functions. Devote sufficient resources to detection and monitoring activities, especially to cybersecurity attacks.
NOREA Event Identification for Logging

Identify events to be logged, covering logical access, physical access, identity management, capacity management, change management, ICT operation (including system activity), and network traffic activities (including network performance). Determine the level of detail for the logs, aligning with the purpose for which the logs were created and to enable effective detection of anomalous activities. Define retention periods for logs, considering business and security objectives, the purpose of recording logs, and risk assessments.

*Data reporting service providers shall, in addition, have in place systems that can effectively check trade reports for completeness, identify omissions and obvious errors, and request re-transmission of those reports.
NOREA Secure Handling of Log Data
Implement measures to secure and handle log data, taking into account the purpose for which the logs were created. Establish measures to detect failures in logging systems. Protect the recording of anomalous activities against tampering and unauthorised access at rest, in use, where relevant, and in transit.
NOREA Error Handling and Recovery
Establish guidelines for handling errors, including support and escalation contacts, as well as external support contacts in case of unexpected operational or technical issues. Define the procedures for ICT system restart, rollback, and recovery to be used in the event of an ICT system disruption. Ensure the contact details are available in case systems are unavailable as well.
NOREA ICT Monitoring

Develop, document and implement capacity and performance management procedures to identify capacity requirements of their ICT systems and apply resource optimisation and monitoring procedures to maintain and improve the availability of data and ICT systems and efficiency of ICT systems and prevent ICT capacity shortages.
NOREA Clock Synchronization Standardization

Ensure clock synchronization of all ICT systems to a single reliable reference source time.
NOREA System Management and Security

Provide system descriptions that encompass secure installation, maintenance, configuration, and deinstallation/disposal of ICT assets. This includes the management of assets, both automated and manual, and the identification and control of legacy ICT systems.