+13. Environmental and physical security
---+13.1 Supporting utilities
------+13.1.1 For the purpose of Article 21(2)(c) of Directive (EU) 2022/2555, the relevant entities shall …
------+13.1.2 For that purpose, the relevant entities shall, where appropriate: (a) protect facilities from power …
------+13.1.3 The relevant entities shall test, review and, where appropriate, update the protection measures on …
---+13.2 Protection against physical and environmental threats
------+13.2.1 For the purpose of Article 21(2)(e) of Directive (EU) 2022/2555, the relevant entities shall …
------+13.2.2 For that purpose, the relevant entities shall, where appropriate: (a) design and implement …
------+13.2.3 The relevant entities shall test, review and, where appropriate, update the protection measures …
---+13.3 Perimeter and physical access control
------+13.3.1 For the purpose of Article 21(2)(i) of Directive (EU) 2022/2555, the relevant entities shall …
------+13.3.2 For that purpose, the relevant entities shall: (a) on the basis of the risk assessment carried out …
------+13.3.3 The relevant entities shall test, review and, where appropriate, update the physical access control …

13. Environmental and physical security

Environmental and physical security

1. Ħarsa ġenerali

13.1 Supporting utilities

Mapping to standards and frameworks

ISO standard 27001:2022A. 7.11
NIST Cybersecurity Framework v2.0DE.CM-02, DE.CM-06, GV.OC-03, GV.OC-05, GV.OC-07, ID.RA-10, ID.IM-01, ID.IM-02, ID.IM-03, ID.IM-04
ETSI Standard EN 319 401 V3.1.1REQ-7.6-03, REQ-7.6-05, REQ-7.11.2-01X, REQ-7.11.2-02X, For network connections REQ-7.8-12
CEN/TS 18026:2024PS-05
BE-CyFun®2023BASIC: ID.GV-3.1, RS.IM-1.1
IMPORTANT: ID.BE-1.1, ID.GV-3.2, PR.IP-7.1, PR.IP-9.1, DE.CM-2.1, DE.CM-6.1, DE.CM-6.2, DE.DP-3.1, DE.DP-5.1, RS.IM-1.2, RS.IM-2.1, RC.IM-1.1
ESSENTIAL: ID.BE-1.2, PR.IP-7.2, PR.IP-7.3, PR.IP-9.2, DE.CM-2.2, DE.DP-5.2
FI-KybermittariRESPONSE-4, CRITICAL-3
EL- Ministerial decision 1689/2025Ministerial decision 1689/2025: articles 23a, 23e, 23f
Cybersecurity Handbook: Part B: 15.5
Self-assessment tool: 16.6
ENS-Royal Decree 311/2022Article 2
Annex II: [mp.if.1]. Separate areas with access control, [mp.if.2] Identification of persons, [mp.if.3] Fitting-out of premises, [mp.if.4] Power supply, [mp.if.5] Fire protection, [mp.if.6] Flood protection, [mp.if.7] Recording of entries and exits of equipment
FR2.B.2-IE/EE
3.A.1-IE/EE
3.A.2-IE/EE
12.1-EE
12.4-EE
12.5-EE
13.6-EE
14.1-IE/EE
14.4-EE
13.2 Protection against physical and environmental threats

Mapping to standards and frameworks

ISO standard 27001:2022A. 7.3, A.7.5
NIST Cybersecurity Framework v2.0PR.IR-02, ID.IM-01, ID.IM-02, ID.IM-03, ID.IM-04
ETSI Standard EN 319 401 V3.1.1Clause 7.6
CEN/TS 18026:2024PS-05
BE-CyFun®2023BASIC: RS.IM-1.1
IMPORTANT: PR.IP-5.1, PR.IP-7.1, PR.IP-9.1, DE.DP-3.1, DE.DP-5.1, RS.IM-1.2, RS.IM-2.1, RC.IM-1.1
ESSENTIAL: PR.IP-5.2, PR.IP-7.2, PR.IP-7.3, PR.IP-9.2, DE.DP-5.2
FI-KybermittariRISK-1, RISK-2, RISK-3, RISK-4, THREAT-2, RESPONSE-3
EL- Ministerial decision 1689/2025Ministerial decision 1689/2025: articles 23a, 23d, 23f
Cybersecurity Handbook: Part B: 15.5
Self-assessment tool: 16.6
ENS-Royal Decree 311/2022Article 2
Annex II: [mp.if.1]. Separate areas with access control, [mp.if.2] Identification of persons, [mp.if.3] Fitting-out of premises, [mp.if.4] Power supply, [mp.if.5] Fire protection, [mp.if.6] Flood protection, [mp.if.7] Recording of entries and exits of equipment
FR12.5-EE
14.4-EE
16.1-EE
20.2-EE
13.3 Perimeter and physical access control

Mapping to standards and frameworks

ISO standard 27001:2022A. 7.1, A.7.2, A.7.4
NIST Cybersecurity Framework v2.0PR.AA-06, DE.CM-02
ETSI Standard EN 319 401 V3.1.1Clause 7.6
CEN/TS 18026:2024PS-01, PS-02, PS-03, PS-04
BE-CyFun®2023BASIC: ID.GV-1.1, PR.AC-2.1, PR.AC-3.1, PR.AC-4.1, PR.AC-4.2, PR.AC-4.3, PR.IP-11.1
IMPORTANT: ID.AM-6.1, ID.GV-1.2, PR.AC-2.2, PR.AC-3.3, PR.AC-4.6, PR.AC-6.1, PR.AT-3.2, PR.DS-3.3, PR.DS-5.1, PR.IP-11.2, PR.MA-2.1, DE.CM-2.1, DE.AE-3.2, DE.CM-6.1, DE.CM-7.1
ESSENTIAL: PR.AC-2.3, PR.AC-2.4, PR.AC-3.4, PR.AC-4.8, PR.DS-1.1, DE.CM-2.2
FI-KybermittariRISK-1, RISK-2, RISK-3, ARCHITECTURE-3, ACCESS-3
EL- Ministerial decision 1689/2025Ministerial decision 1689/2025: articles 23a, 23b, 23c, 23f
Cybersecurity Handbook: Part B: 15.1, 15.2, 15.3, 15.4, 15.6
Self-assessment tool: 16.1, 16.2, 16.3, 16.4, 16.5, 16.7
ENS-Royal Decree 311/2022Article 18
Annex II: [mp.if.1]. Separate areas with access control, [mp.if.2] Identification of persons, [mp.if.7] Recording of entries and exits of equipment
FR2.B.2-IE/EE
6.1-IE/EE
6.2-EE
6.3-EE
6.4-EE
6.5-IE/EE
16.1-EE
17.3-EE

1.1 Referenzi

1.2 Rekwiżiti identifikati

1.3 Regolamenti relatati

2. Rekwiżiti identifikati

Rekwiżiti

3. Regolamenti relatati

Regolamenti

Kwistjonijiet marbuta

Links
is related to 13. Environmental and physical security (Article 21(2), points (c), (e) and (i) of Directive (EU) …