+13.1.3 The relevant entities shall test, review and, where appropriate, update the protection measures on …

13.1.3 The relevant entities shall test, review and, where appropriate, update the protection measures on …

Requirement

The relevant entities shall test, review and, where appropriate, update the protection measures on a regular basis or following significant incidents or significant changes to operations or risks.

Guidance

  • Conduct routine tests of protection measures.
  • Set up periodic reviews to evaluate the effectiveness of current protection measures.

Examples of evidence

  • Updated measures to protect against the failure and disruption of supporting utilities, review comments and/or change logs.
  • Evidence that the measures that protect supporting utilities against failures and disruptions are deployed and regularly tested.

Tips: guidance

  • Include a simulated total power failure in the verification of the testing procedure for power generators.
  • Make employees aware of dependencies on supporting utilities.
  • Train staff in how to respond effectively to failures and disruptions of supporting utilities.
  • Set up monitoring systems to detect utility failures or disruptions.

Tips: examples of evidence

  • Records of internal communications, emails or newsletters highlighting the importance of supporting utilities and their impact on operations.
  • Logs demonstrating detection and recording of any utility failures or disruptions.

1. Pregled

1.1 Sklici

1.2 Ugotovljene zahteve

1.3 Povezani predpisi

2. Ugotovljene zahteve

Zahteve

3. Povezani predpisi

Predpisi

Povezane zadeve

Povezave
is related to 13.1.3. Zadevni subjekti zaščitne ukrepe preskušajo, pregledujejo in, kadar je ustrezno …
  • ENISA -

    EN: Publications of the European Union Agency for Cybersecurity (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Unless otherwise noted, licensed under CC BY 4.0. Changes: divided into sections, converted into the GRCA format and linked to the EU legal acts they refer to; images and material of third parties are not reproduced. Only the versions published by ENISA are authoritative.

    DE: Veröffentlichungen der Agentur der Europäischen Union für Cybersicherheit (ENISA), https://www.enisa.europa.eu/. © European Union Agency for Cybersecurity (ENISA). Soweit nicht anders vermerkt, lizenziert unter CC BY 4.0. Änderungen: in Abschnitte aufgeteilt, in das GRCA-Format umgewandelt und mit den EU-Rechtsakten verknüpft, auf die sie sich beziehen; Bilder und Material Dritter werden nicht wiedergegeben. Maßgeblich sind allein die von der ENISA veröffentlichten Fassungen.