3.1.1 For the purpose of Article 21(2), point (b) of Directive (EU) 2022/2555, the relevant entities …

Requirement

For the purpose of Article 21(2), point (b) of Directive (EU) 2022/2555, the relevant entities shall establish and implement an incident handling policy laying down the roles, responsibilities and procedures for detecting, analysing, containing or responding to, recovering from, documenting and reporting of incidents in a timely manner.

Guidance

• Define clear objectives for the incident handling policy.
• Ensure the policy complies with relevant laws, regulations and industry standards (17).

Examples of evidence

• Documented incident handling policy that contains, at least, the elements referred to in point 3.1.2 of the Annex to the regulation.
• Documented standards and/or good practices that are taken into consideration for this policy.

1. Ħarsa ġenerali

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

3. Regolamenti relatati

Kwistjonijiet marbuta

• ENISA -