+Security Management
---+Architectural and Network Security
------+Network Design and Segmentation
------+Network Security
------+Session Management
---+Security Monitoring & Log Management
------+Security Monitoring (SIEM)
------+Event Identification for Logging
------+Secure Handling of Log Data
---+Data and (Legacy) System Security
------+ICT (Security) Systems, tools, and solutions
------+Data Protection Practices
------+Vendor Recommended Security Settings
------+Endpoint Devices
------+Secure Data Deletion and Disposal
---+Encryption and Cryptography
------+Data Encryption
------+Cryptographic Key Management and Lifecycle
---+Identity and Access Management
------+Authentication Methods
------+Identity Management
------+Privilige Access Management
------+Account Management
---+Physical and Environmental Security
------+Physical and Environmental Security
---+Security Awareness
------+Resilience Training Programs
------+Inclusion of Third-Party Providers
---+Vulnerability and Patch Management
------+Resource Management
------+Vulnerability Management
------+Patch Management

Security Management

None

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

Requisiti
Fonte Requisito

3. Regolamentazioni correlate

Regolamentazioni
Fonte Regolamentazione
  • NOREA -

    EN: DORA in Control Framework of NOREA, the Dutch professional association of IT auditors, https://www.norea.nl/. © NOREA. Reproduced with the permission of NOREA; converted into the GRCA format. Only the version published by NOREA is authoritative.

    DE: DORA in Control Framework von NOREA, dem niederländischen Berufsverband der IT-Auditoren, https://www.norea.nl/. © NOREA. Wiedergabe mit Genehmigung von NOREA; in das GRCA-Format umgewandelt. Maßgeblich ist allein die von NOREA veröffentlichte Fassung.