6.5.1 The relevant entities shall establish, implement and apply a policy and procedures for security …

Requirement

The relevant entities shall establish, implement and apply a policy and procedures for security testing.

Guidance

• Take into account industry-recognised standards when developing the testing policy (56).
• Establish and maintain a testing programme appropriate to the entity’s size, complexity and maturity (57).

Examples of evidence

• Documented security testing and procedures based on relevant standards and good practices.
• Guidelines and standards that the entity adheres to for conducting security tests.

1. Panoramica

1.1 Riferimenti

1.2 Requisiti identificati

1.3 Regolamentazioni correlate

2. Requisiti identificati

3. Regolamentazioni correlate

Ticket collegati

• ENISA -