+12.1.3 The relevant entities shall conduct periodic reviews of the classification levels of assets and …

12.1.3 The relevant entities shall conduct periodic reviews of the classification levels of assets and …

Requirement

The relevant entities shall conduct periodic reviews of the classification levels of assets and update them, where appropriate.

Guidance

  • Define criteria for reviewing the classification over time.
  • Review the classification at least annually, taking into account:
    • regulatory changes; and
    • changes in the value, sensitivity and criticality of the assets throughout their life cycle.

Examples of evidence

  • Documentation showing the schedule for reviews.
  • Records of the most recent review and logs detailing changes made during the last review, including reclassifications and the addition/removal of assets.

Tips: guidance

  • Ensure that owners of the assets are responsible for their classification.
  • Communicate to personnel the classification of assets and associated protection requirements.

Tips: examples of evidence

  • Personnel knowing classification levels and protection requirements for each level.

1. Pregled

1.1 Reference

1.2 Utvrđeni zahtjevi

1.3 Povezani propisi

2. Utvrđeni zahtjevi

Zahtjevi

3. Povezani propisi

Propisi

Povezani zadaci

Poveznice
is related to 12.1.3. Relevantni subjekti periodično provjeravaju klasifikacijske razine imovine te ih ažuriraju …
  • ENISA -

    EN: Publications of the European Union Agency for Cybersecurity (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Unless otherwise noted, licensed under CC BY 4.0. Changes: divided into sections, converted into the GRCA format and linked to the EU legal acts they refer to; images and material of third parties are not reproduced. Only the versions published by ENISA are authoritative.

    DE: Veröffentlichungen der Agentur der Europäischen Union für Cybersicherheit (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Soweit nicht anders vermerkt, lizenziert unter CC BY 4.0. Änderungen: in Abschnitte aufgeteilt, in das GRCA-Format umgewandelt und mit den EU-Rechtsakten verknüpft, auf die sie sich beziehen; Bilder und Material Dritter werden nicht wiedergegeben. Maßgeblich sind allein die von der ENISA veröffentlichten Fassungen.