+6.5.1 The relevant entities shall establish, implement and apply a policy and procedures for security …

6.5.1 The relevant entities shall establish, implement and apply a policy and procedures for security …

Requirement

The relevant entities shall establish, implement and apply a policy and procedures for security testing.

Guidance

  • Take into account industry-recognised standards when developing the testing policy (56).
  • Establish and maintain a testing programme appropriate to the entity’s size, complexity and maturity (57).

Examples of evidence

  • Documented security testing and procedures based on relevant standards and good practices.
  • Guidelines and standards that the entity adheres to for conducting security tests.

1. Apžvalga

1.1 Nuorodos

1.2 Nustatyti reikalavimai

1.3 Susiję teisės aktai

2. Nustatyti reikalavimai

Reikalavimai

3. Susiję teisės aktai

Teisės aktai

Susietos užduotys

Saitai
is related to 6.5.1. Atitinkami subjektai nustato, įdiegia ir taiko saugumo testavimo politiką ir procedūras.
  • ENISA -

    EN: Publications of the European Union Agency for Cybersecurity (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Unless otherwise noted, licensed under CC BY 4.0. Changes: divided into sections, converted into the GRCA format and linked to the EU legal acts they refer to; images and material of third parties are not reproduced. Only the versions published by ENISA are authoritative.

    DE: Veröffentlichungen der Agentur der Europäischen Union für Cybersicherheit (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Soweit nicht anders vermerkt, lizenziert unter CC BY 4.0. Änderungen: in Abschnitte aufgeteilt, in das GRCA-Format umgewandelt und mit den EU-Rechtsakten verknüpft, auf die sie sich beziehen; Bilder und Material Dritter werden nicht wiedergegeben. Maßgeblich sind allein die von der ENISA veröffentlichten Fassungen.