+4.3. Crisis management
---+4.3.1. The relevant entities shall put in place a process for crisis management.
---+4.3.2. The relevant entities shall ensure that the crisis management process addresses at least the …
---+4.3.3. The relevant entities shall implement a process for managing and making use of information …
---+4.3.4. The relevant entities shall test, review and, where appropriate, update the crisis …
|
4.3. Crisis management
4.3. Crisis management
1. Visão geral
| Título |
Regulamentação |
|
4.3.1. The relevant entities shall put in place a process for crisis management.
|
|
4.3.1.
|
The relevant entities shall put in place a process for crisis management.
|
|
|
4.3.2. The relevant entities shall ensure that the crisis management process addresses at least the …
|
|
4.3.2.
|
The relevant entities shall ensure that the crisis management process addresses at least the following elements:
|
(a)
|
roles and responsibilities for personnel and, where appropriate, suppliers and service providers, specifying the allocation of roles in crisis situations, including specific steps to follow;
|
|
(b)
|
appropriate communication means between the relevant entities and relevant competent authorities;
|
|
(c)
|
application of appropriate measures to ensure the maintenance of network and information system security in crisis situations.
|
For the purpose of point (b), the flow of information between the relevant entities and relevant competent authorities shall include both obligatory communications, such as incident reports and related timelines, and non-obligatory communications.
|
|
|
4.3.3. The relevant entities shall implement a process for managing and making use of information …
|
|
4.3.3.
|
The relevant entities shall implement a process for managing and making use of information received from the CSIRTs or, where applicable, the competent authorities, concerning incidents, vulnerabilities, threats or possible mitigation measures.
|
|
|
4.3.4. The relevant entities shall test, review and, where appropriate, update the crisis …
|
|
4.3.4.
|
The relevant entities shall test, review and, where appropriate, update the crisis management plan on a regular basis or following significant incidents or significant changes to operations or risks.
|
|
,
1.1 Referências
1.2 Requisitos identificados
1.3 Normas relacionadas
2. Requisitos identificados
Requisitos
| Fonte |
Requisito |
3. Normas relacionadas
Pedidos ligados
|