+6.5. Security testing
---+6.5.1. The relevant entities shall establish, implement and apply a policy and procedures for …
---+6.5.2. The relevant entities shall: (a) establish, based on the risk assessment carried out …
---+6.5.3. The relevant entities shall review and, where appropriate, update their security testing …
|
6.5. Security testing
6.5. Security testing
1. Pārskats
| Nosaukums |
Regulējums |
|
6.5.1. The relevant entities shall establish, implement and apply a policy and procedures for …
|
|
6.5.1.
|
The relevant entities shall establish, implement and apply a policy and procedures for security testing.
|
|
|
6.5.2. The relevant entities shall: (a) establish, based on the risk assessment carried out …
|
|
6.5.2.
|
The relevant entities shall:
|
(a)
|
establish, based on the risk assessment carried out pursuant to point 2.1, the need, scope, frequency and type of security tests;
|
|
(b)
|
carry out security tests according to a documented test methodology, covering the components identified as relevant for secure operation in a risk analysis;
|
|
(c)
|
document the type, scope, time and results of the tests, including assessment of criticality and mitigating actions for each finding;
|
|
(d)
|
apply mitigating actions in case of critical findings.
|
|
|
|
6.5.3. The relevant entities shall review and, where appropriate, update their security testing …
|
|
6.5.3.
|
The relevant entities shall review and, where appropriate, update their security testing policies at planned intervals.
|
|
,
1.1 Atsauces
1.2 Identificētās prasības
1.3 Saistītie standarti
2. Identificētās prasības
3. Saistītie standarti
Saistītie uzdevumi
|