+3.1. Incident handling policy
---+3.1.1. For the purpose of Article 21(2), point (b) of Directive (EU) 2022/2555, the relevant …
---+3.1.2. The policy referred to in point 3.1.1 shall be coherent with the business continuity and …
---+3.1.3. The roles, responsibilities and procedures laid down in the policy shall be tested and …
|
3.1. Incident handling policy
3.1. Incident handling policy
1. Pregled
| Naslov |
Regulativa |
|
3.1.1. For the purpose of Article 21(2), point (b) of Directive (EU) 2022/2555, the relevant …
|
|
3.1.1.
|
For the purpose of Article 21(2), point (b) of Directive (EU) 2022/2555, the relevant entities shall establish and implement an incident handling policy laying down the roles, responsibilities, and procedures for detecting, analysing, containing or responding to, recovering from, documenting and reporting of incidents in a timely manner.
|
|
|
3.1.2. The policy referred to in point 3.1.1 shall be coherent with the business continuity and …
|
|
3.1.2.
|
The policy referred to in point 3.1.1 shall be coherent with the business continuity and disaster recovery plan referred to in point 4.1. The policy shall include:
|
(a)
|
a categorisation system for incidents that is consistent with the event assessment and classification carried out pursuant to point 3.4.1;
|
|
(b)
|
effective communication plans including for escalation and reporting;
|
|
(c)
|
assignment of roles to detect and appropriately respond to incidents to competent employees;
|
|
(d)
|
documents to be used in the course of incident detection and response such as incident response manuals, escalation charts, contact lists and templates.
|
|
|
|
3.1.3. The roles, responsibilities and procedures laid down in the policy shall be tested and …
|
|
3.1.3.
|
The roles, responsibilities and procedures laid down in the policy shall be tested and reviewed and, where appropriate, updated at planned intervals and after significant incidents or significant changes to operations or risks.
|
|
,
1.1 Sklici
1.2 Ugotovljene zahteve
1.3 Povezani standardi
2. Ugotovljene zahteve
3. Povezani standardi
Povezane zadeve
|