6.5.1 The relevant entities shall establish, implement and apply a policy and procedures for security …

Requirement

The relevant entities shall establish, implement and apply a policy and procedures for security testing.

Guidance

• Take into account industry-recognised standards when developing the testing policy (56).
• Establish and maintain a testing programme appropriate to the entity’s size, complexity and maturity (57).

Examples of evidence

• Documented security testing and procedures based on relevant standards and good practices.
• Guidelines and standards that the entity adheres to for conducting security tests.

1. Prezentare generală

1.1 Referințe

1.2 Cerințe identificate

1.3 Reglementări asociate

2. Cerințe identificate

3. Reglementări asociate

Tichete legate

• ENISA -