+8.1. Awareness raising and basic cyber hygiene practices
---+8.1.1. For the purpose of Article 21(2), point (g) of Directive (EU) 2022/2555, the relevant …
---+8.1.2. For the purpose of point 8.1.1, the relevant entities shall offer to their employees …
---+8.1.3. The awareness raising programme shall, where appropriate, be tested in terms of …
|
8.1. Awareness raising and basic cyber hygiene practices
8.1. Awareness raising and basic cyber hygiene practices
1. Ħarsa ġenerali
| Titlu |
Regolamentazzjoni |
|
8.1.1. For the purpose of Article 21(2), point (g) of Directive (EU) 2022/2555, the relevant …
|
|
8.1.1.
|
For the purpose of Article 21(2), point (g) of Directive (EU) 2022/2555, the relevant entities shall ensure that their employees, including members of management bodies, as well as direct suppliers and service providers are aware of risks, are informed of the importance of cybersecurity and apply cyber hygiene practices.
|
|
|
8.1.2. For the purpose of point 8.1.1, the relevant entities shall offer to their employees …
|
|
8.1.2.
|
For the purpose of point 8.1.1, the relevant entities shall offer to their employees, including members of management bodies, as well as to direct suppliers and service providers where appropriate in accordance with point 5.1.4, an awareness raising programme, which shall:
|
(a)
|
be scheduled over time, so that the activities are repeated and cover new employees;
|
|
(b)
|
be established in line with the network and information security policy, topic-specific policies and relevant procedures on network and information security;
|
|
(c)
|
cover relevant cyber threats, the cybersecurity risk-management measures in place, contact points and resources for additional information and advice on cybersecurity matters, as well as cyber hygiene practices for users.
|
|
|
|
8.1.3. The awareness raising programme shall, where appropriate, be tested in terms of …
|
|
8.1.3.
|
The awareness raising programme shall, where appropriate, be tested in terms of effectiveness. The awareness raising programme shall be updated and offered at planned intervals taking into account changes in cyber hygiene practices, and the current threat landscape and risks posed to the relevant entities.
|
|
,
1.1 Referenzi
1.2 Rekwiżiti identifikati
1.3 Standards relatati
2. Rekwiżiti identifikati
3. Standards relatati
Kwistjonijiet marbuta
|