1. Policy on the security of network and information systems

Policy on the security of network and information systems

1. Przegląd

1.1 Policy on the security of network and information systems

ISO standard 27001:2022	5.2, A.5.1, A.5.36, A.5.4, 9.3
NIST Cybersecurity Framework v2.0	PR.AT-02, GV.PO-01, GV.PO-02, GV.OC-03, GV.RM-03, GV.OC-02, ID.IM-01, ID.IM-02, ID.IM-03, ID.IM-04
ETSI Standard EN 319 401 V3.1.1	REQ 6.1-02, REQ 6.1-06, REQ 6.1-07, REQ 6.1-08, Clause 6.3
CEN/TS 18026:2024	ISP-01, ISP-02, OPS-01, OPS-02, OPS-03
BE-CyFun®2023	BASIC: ID.GV-1.1 IMPORTANT: ID.GV-1.2, PR.IP-5.1, PR.IP-6.1, PR.PT-2.1, PR.AT-4.1 ESSENTIAL: PR.PT-3.3, PR.PT-4.3
FI-Kybermittari	WORKFORCE-3, PROGRAM-1, PROGRAM-2, Management activities, CRITICAL-2, ARCHITECTURE-1
EL- Ministerial decision 1689/2025	Ministerial decision 1689/2025: articles 6a, 6b, 6c Cybersecurity handbook: Part A: 2, Part B: 1.1, 1.5, 2.1, 3.1, 4.1, 5.1, 6.1, 7.1, 8.1, 9.1, 10.1, 11.1, 12.1, 13.1, 14.1, 15.1, 16.1, 17.1, 18.1 Self assessment tool: 1.7, 1.8, 1.9, 1.10, 1.11, 1.12, 1.13, 2.1, 2.2, 3.1, 4.1, 5.1, 6.1, 7.1, 8.1, 9.1, 10.1, 11.1, 12.1, 13.1, 14.1, 15.1, 16.1, 17.1, 18.1, 19.1
ENS-Royal Decree 311/2022	Article 5, Article 6, Article 10, Article 12, Article 27, Annex II: [org.1] Security policy, [org.2] Security regulations, [org.3] Security procedures
FR	2.B.1-IE/EE 2.B.2-IE/EE 2.B.3-IE/EE 2.B.4-IE/EE 2.B.5-IE/EE 2.C.1-IE/EE 2.C.2-IE/EE 2.C.3-IE/EE

1.2 Roles, responsibilities and authorities

ISO standard 27001:2022	5.3, A.5.2, A.5.3, A.5.4
NIST Cybersecurity Framework v2.0	GV.RR-02, GV.SC-02, PR.AT-02, ID.IM-01, ID.IM-02, ID.IM-03, ID.IM-04
ETSI Standard EN 319 401 V3.1.1	REQ-7.1.2-01, REQ-7.2-01X, REQ-7.2-03X, REQ 7.2-07X, REQ 7.2-08X, REQ 7.2-09X, REQ 7.2-10X, REQ 7.2-11X, REQ 7.2-12X, REQ 7.2-13X, REQ-7.2-14X, REQ-7.2-15X
CEN/TS 18026:2024	ISP-02, OIS-02
BE-CyFun®2023	BASIC: RS.RP-1.1 IMPORTANT: ID.AM-6.1, PR.AT-2.1, PR.AT-4.1, PR.AT-5.1, RS.CO-1.1
FI-Kybermittari	PROGRAM-1, PROGRAM-2, CRITICAL-2, WORKFORCE-2 WORKFORCE-3
EL- Ministerial decision 1689/2025	Ministerial decision 1689/2025: articles 7a, 7b, 7c Cybersecurity handbook: Part A: 2, Part B: 1.1, 2.1, 3.1, 4.1, 5.1, 6.1, 7.1, 8.1, 9.1, 10.1, 11.1, 12.1, 13.1, 14.1, 15.1, 16.1, 17.1, 18.1 Self assessment tool: 1.1, 1.2, 1.3, 1.4, 1.5
ENS-Royal Decree 311/2022	Article 11, Article 13 Annex II: [org.1] Security policy
FR	2.A.1-IE/EE 2.A.2-EE 2.A.3-IE/EE 2.B.2-IE/EE 4.3-EE 4.4-IE/EE 4.5-IE/EE

Wymagania
Źródło	Wymaganie

Regulacje
Źródło	Regulacja

Powiązania
Typ powiązania	Zgłoszenie
is related to	1. Policy on the security of network and information systems (Article 21(2), point (a) of Directive …

ENISA -
EN: Publications of the European Union Agency for Cybersecurity (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Unless otherwise noted, licensed under CC BY 4.0. Changes: divided into sections, converted into the GRCA format and linked to the EU legal acts they refer to; images and material of third parties are not reproduced. Only the versions published by ENISA are authoritative.

DE: Veröffentlichungen der Agentur der Europäischen Union für Cybersicherheit (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Soweit nicht anders vermerkt, lizenziert unter CC BY 4.0. Änderungen: in Abschnitte aufgeteilt, in das GRCA-Format umgewandelt und mit den EU-Rechtsakten verknüpft, auf die sie sich beziehen; Bilder und Material Dritter werden nicht wiedergegeben. Maßgeblich sind allein die von der ENISA veröffentlichten Fassungen.