11.1.1 For the purpose of Article 21(2), point (i) of Directive (EU) 2022/2555, the relevant entities …

Requirement

For the purpose of Article 21(2), point (i) of Directive (EU) 2022/2555, the relevant entities shall establish, document and implement logical and physical access control policies for the access to their network and information systems, based on business requirements as well as network and information system security requirements.

Guidance

• Implement and maintain logical and physical access restrictions to network and information system based on access-control policies that take into account industry good practices.
• Ensure that these policies are documented, communicated to all relevant stakeholders and include clear guidelines on the appropriate use of access privileges.

Examples of evidence

• Access control policy document or documents outlining the access control requirements, procedures and responsibilities.

1. Przegląd

1.1 Odwołania

1.2 Zidentyfikowane wymagania

1.3 Powiązane regulacje

2. Zidentyfikowane wymagania

3. Powiązane regulacje

Powiązane zgłoszenia

• ENISA -