+6.5. Security testing
---+6.5.1. The relevant entities shall establish, implement and apply a policy and procedures for …
---+6.5.2. The relevant entities shall: (a) establish, based on the risk assessment carried out …
---+6.5.3. The relevant entities shall review and, where appropriate, update their security testing …
|
6.5. Security testing
6.5. Security testing
1. Pregled
| Naslov |
Regulativa |
|
6.5.1. The relevant entities shall establish, implement and apply a policy and procedures for …
|
|
6.5.1.
|
The relevant entities shall establish, implement and apply a policy and procedures for security testing.
|
|
|
6.5.2. The relevant entities shall: (a) establish, based on the risk assessment carried out …
|
|
6.5.2.
|
The relevant entities shall:
|
(a)
|
establish, based on the risk assessment carried out pursuant to point 2.1, the need, scope, frequency and type of security tests;
|
|
(b)
|
carry out security tests according to a documented test methodology, covering the components identified as relevant for secure operation in a risk analysis;
|
|
(c)
|
document the type, scope, time and results of the tests, including assessment of criticality and mitigating actions for each finding;
|
|
(d)
|
apply mitigating actions in case of critical findings.
|
|
|
|
6.5.3. The relevant entities shall review and, where appropriate, update their security testing …
|
|
6.5.3.
|
The relevant entities shall review and, where appropriate, update their security testing policies at planned intervals.
|
|
,
1.1 Sklici
1.2 Ugotovljene zahteve
1.3 Povezani standardi
2. Ugotovljene zahteve
3. Povezani standardi
Povezane zadeve
|