+INF.11.A1 Planning and Procurement [Process Owner, Procurement Department, Data Protection Officer] (B)

INF.11.A1 Planning and Procurement [Process Owner, Procurement Department, Data Protection Officer] (B)

The intended use of a vehicle MUST be planned before the vehicle is procured. The functional requirements for vehicles and, in particular, the requirements for information security and data protection of the IT components installed in them MUST be determined. The following aspects MUST be taken into account:

  • operational scenarios of the vehicles
  • the immediate operational environment of the vehicles
  • the entire lifecycle of the vehicles

The vehicles MUST also have adequate locking systems unless they can be continuously secured by other safeguards or arrangements. During planning, consideration SHOULD be given to the fact that many vehicles can transmit data to the vehicle manufacturer and other third parties.

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

Wymagania

3. Powiązane regulacje

Regulacje

Powiązane zgłoszenia

Powiązania
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information