3.4.1 The relevant entities shall assess suspicious events to determine whether they constitute incidents …

Requirement

The relevant entities shall assess suspicious events to determine whether they constitute incidents and, if so, determine their nature and severity.

Guidance

• Use criteria to assess whether a suspicious event is an incident or not. The guidance in section 3.1.2 provides an indicative, non-exhaustive list of such criteria.
• Determine the nature and severity of the event based on a categorisation system referred to in point 3.1.2 (a) of the Annex to the regulation.

Examples of evidence

• Defined criteria in place.
• A categorisation system referred to in point 3.1.2 (a) of the Annex to the regulation .

1. Overzicht

1.1 Referenties

1.2 Geïdentificeerde eisen

1.3 Gerelateerde regelingen

2. Geïdentificeerde eisen

3. Gerelateerde regelingen

Gekoppelde issues

• ENISA -