+2.3. Independent review of information and network security
---+2.3.1. The relevant entities shall review independently their approach to managing network and …
---+2.3.2. The relevant entities shall develop and maintain processes to conduct independent reviews …
---+2.3.3. The results of the independent reviews, including the results from the compliance monitoring …
---+2.3.4. The independent reviews shall take place at planned intervals and when significant incidents …

2.3. Independent review of information and network security

2.3.   Independent review of information and network security

1. Overzicht

,
2.3.1. The relevant entities shall review independently their approach to managing network and …

2.3.1.

 The relevant entities shall review independently their approach to managing network and information system security and its implementation including people, processes and technologies.
2.3.2. The relevant entities shall develop and maintain processes to conduct independent reviews …

2.3.2.

 The relevant entities shall develop and maintain processes to conduct independent reviews which shall be carried out by individuals with appropriate audit competence. Where the independent review is conducted by staff members of the relevant entity, the persons conducting the reviews shall not be in the line of authority of the personnel of the area under review. If the size of the relevant entities does not allow such separation of line of authority, the relevant entities shall put in place alternative measures to guarantee the impartiality of the reviews.
2.3.3. The results of the independent reviews, including the results from the compliance monitoring …

2.3.3.

 The results of the independent reviews, including the results from the compliance monitoring pursuant to point 2.2 and the monitoring and measurement pursuant to point 7, shall be reported to the management bodies. Corrective actions shall be taken or residual risk accepted according to the relevant entities’ risk acceptance criteria.
2.3.4. The independent reviews shall take place at planned intervals and when significant incidents …

2.3.4.

 The independent reviews shall take place at planned intervals and when significant incidents or significant changes to operations or risks occur.

1.1 Referenties

1.2 Geïdentificeerde eisen

1.3 Gerelateerde standaarden

2. Geïdentificeerde eisen

Eisen

3. Gerelateerde standaarden

Standaarden

Gekoppelde issues

Koppelingen
is related to 2.3 Independent review of information and network security
  • Builddate: 18.10.2024 00:00:00 -Doknr: CELEX:32024R2690
  • EULAW -

    EN: Legal acts of the European Union from EUR-Lex, https://eur-lex.europa.eu/. © European Union. Re-use is authorised by Decision 2011/833/EU, provided the source is acknowledged; the consolidated texts are licensed under CC BY 4.0 (EUR-Lex legal notice). Divided into sections and converted into the GRCA format, the wording unchanged. Only the legislation published in the Official Journal of the European Union is deemed authentic.

    DE: Rechtsakte der Europäischen Union aus EUR-Lex, https://eur-lex.europa.eu/. © Europäische Union. Weiterverwendung nach Beschluss 2011/833/EU mit Quellenangabe gestattet; die konsolidierten Fassungen stehen unter CC BY 4.0 (Rechtlicher Hinweis von EUR-Lex). In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert. Verbindlich sind allein die im Amtsblatt der Europäischen Union veröffentlichten Rechtsakte.