+12 straipsnis 2.

12 straipsnis 2.

1 dalyje nurodytos registravimo procedūros, protokolai ir priemonės apima visus šiuos elementus:

a) 

registruotinų įvykių nustatymą, registracijos žurnalų saugojimo laikotarpį ir priemones registracijos žurnalų duomenims apsaugoti ir tvarkyti, atsižvelgiant į paskirtį, dėl kurios registracijos žurnalai buvo sukurti;

b) 

registracijos žurnalų detalumo lygio suderinimą su jų paskirtimi ir naudojimu, kad būtų lengviau veiksmingai aptikti neįprastą veiklą, kaip nurodyta 24 straipsnyje;

c) 

reikalavimą registruoti įvykius, susijusius su:

i) 

loginės ir fizinės prieigos kontrole, nurodyta 21 straipsnyje, ir tapatybės duomenų tvarkymu;

ii) 

pajėgumų valdymu;

iii) 

pakeitimų valdymu;

iv) 

IRT operacijomis, įskaitant IRT sistemos veiklą;

v) 

tinklo duomenų srauto veiklą, įskaitant IRT tinklo veikimą;

d) 

priemones registravimo sistemoms ir registracijos žurnalų informacijai apsaugoti nuo neteisėto keitimo, pašalinimo ir neteisėtos prieigos saugojimo, perdavimo ir prireikus naudojimo metu;

e) 

priemones registravimo sistemų gedimui aptikti;

f) 

(nedarant poveikio jokiems taikytiniems reguliavimo reikalavimams pagal Sąjungos ar nacionalinę teisę) visų finansų sektoriaus subjekto IRT sistemų laikrodžių sinchronizavimą pagal dokumentuotą patikimą atskaitinio laiko šaltinį.

Taikydami a punktą, finansų sektoriaus subjektai nustato saugojimo laikotarpį atsižvelgdami į veiklos ir informacijos saugumo tikslus, įvykio registravimo registracijos žurnaluose priežastį ir IRT rizikos vertinimo rezultatus.

1. Apžvalga

,

1.1 Nuorodos

1.2 Nustatyti reikalavimai

1.3 Susiję standartai

2. Nustatyti reikalavimai

Reikalavimai

3. Susiję standartai

Standartai
NOREA Security Monitoring (SIEM)

Put in place mechanisms to detect anomalous activities, including network performance issues, incidents (reported by the third-parties in the services that they provide), and potential material single points of failure. The mechanisms shall enable multi-layers of control, define alerting thresholds, monitoring on specific events and criteria to automatically trigger incident response. Identify and implement tools generating alerts of anomalous activities and behaviour, at least for ICT assets and information assets supporting critical or important functions. Devote sufficient resources to detection and monitoring activities, especially to cybersecurity attacks.
NOREA Event Identification for Logging

Identify events to be logged, covering logical access, physical access, identity management, capacity management, change management, ICT operation (including system activity), and network traffic activities (including network performance). Determine the level of detail for the logs, aligning with the purpose for which the logs were created and to enable effective detection of anomalous activities. Define retention periods for logs, considering business and security objectives, the purpose of recording logs, and risk assessments.

*Data reporting service providers shall, in addition, have in place systems that can effectively check trade reports for completeness, identify omissions and obvious errors, and request re-transmission of those reports.
NOREA Secure Handling of Log Data
Implement measures to secure and handle log data, taking into account the purpose for which the logs were created. Establish measures to detect failures in logging systems. Protect the recording of anomalous activities against tampering and unauthorised access at rest, in use, where relevant, and in transit.
NOREA Error Handling and Recovery
Establish guidelines for handling errors, including support and escalation contacts, as well as external support contacts in case of unexpected operational or technical issues. Define the procedures for ICT system restart, rollback, and recovery to be used in the event of an ICT system disruption. Ensure the contact details are available in case systems are unavailable as well.
NOREA ICT Monitoring

Develop, document and implement capacity and performance management procedures to identify capacity requirements of their ICT systems and apply resource optimisation and monitoring procedures to maintain and improve the availability of data and ICT systems and efficiency of ICT systems and prevent ICT capacity shortages.
NOREA Clock Synchronization Standardization

Ensure clock synchronization of all ICT systems to a single reliable reference source time.
NOREA System Management and Security

Provide system descriptions that encompass secure installation, maintenance, configuration, and deinstallation/disposal of ICT assets. This includes the management of assets, both automated and manual, and the identification and control of legacy ICT systems.
  • Builddate: 25.06.2024 00:00:00 -Doknr: CELEX:32024R1774
  • EULAW -

    EN: Legal acts of the European Union from EUR-Lex, https://eur-lex.europa.eu/. © European Union. Re-use is authorised by Decision 2011/833/EU, provided the source is acknowledged; the consolidated texts are licensed under CC BY 4.0 (EUR-Lex legal notice). Divided into sections and converted into the GRCA format, the wording unchanged. Only the legislation published in the Official Journal of the European Union is deemed authentic.

    DE: Rechtsakte der Europäischen Union aus EUR-Lex, https://eur-lex.europa.eu/. © Europäische Union. Weiterverwendung nach Beschluss 2011/833/EU mit Quellenangabe gestattet; die konsolidierten Fassungen stehen unter CC BY 4.0 (Rechtlicher Hinweis von EUR-Lex). In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert. Verbindlich sind allein die im Amtsblatt der Europäischen Union veröffentlichten Rechtsakte.