+8. Basic cyber hygiene practices and security training
---+8.1 Awareness raising and basic cyber hygiene practices
------+8.1.1 For the purpose of Article 21(2), point (g) of Directive (EU) 2022/2555, the relevant entities …
------+8.1.2 For the purpose of point 8.1.1., the relevant entities shall offer to all employees, including …
------+8.1.3 The awareness raising programme shall, where appropriate, be tested in terms of effectiveness. The …
---+8.2 Security training
------+8.2.1 The relevant entities shall identify employees, whose roles require security relevant skill sets …
------+8.2.2 The relevant entities shall establish, implement and apply a training program in line with the …
------+8.2.3 The training referred to in point 8.2.1. shall be relevant to the job function of the employee and …
------+8.2.4 The relevant entities shall apply training to staff members who transfer to new positions or roles …
------+8.2.5 The program shall be updated and run periodically taking into account applicable policies and …
|
8. Basic cyber hygiene practices and security training
Basic cyber hygiene practices and security training
1. Pregled
| Naslov |
Standard |
|
8.1 Awareness raising and basic cyber hygiene practices
|
Mapping to standards and frameworks| ISO standard 27001:2022 | 7.3, A.6.3, A.8.7 | | NIST Cybersecurity Framework v2.0 | PR.AT-01, PR.AT-02, ID.IM-01, ID.IM-02, ID.IM-03, ID.IM-04 | | ETSI Standard EN 319 401 V3.1.1 | REQ-7.2-01X, REQ-7.2-02, REQ-7.2-03X, REQ-7.2-04X, REQ-7.2-05X | | CEN/TS 18026:2024 | HR-04, DOC-01 | | BE-CyFun®2023 | BASIC: PR.AT-1.1
IMPORTANT: PR.AT-1.2
ESSENTIAL: PR.AT-1.3 | | FI-Kybermittari | WORKFORCE-2, WORKFORCE-3, WORKFORCE-4, PROGRAM-2 | | EL- Ministerial decision 1689/2025 | Ministerial decision 1689/2025: articles 4b.e, 21a, 21c
Cybersecurity Handbook: Part B: 10.4, 10.5, 10.6, 10.7, 10.8, 10.9, 10.10, 10.11, 10.12, 10.13, 10.14, 10.15, 12.1
Self-assessment tool: 11.1, 11.5, 11.6, 13.1 | | ENS-Royal Decree 311/2022 | Article 6
Annex II [mp.per.3] Awareness | | FR | 4.1-IE/EE
4.2-IE/EE
4.3-EE
4.4-IE/EE
4.5-IE/EE
15.1-IE/EE |
|
|
8.2 Security training
|
Mapping to standards and frameworks| ISO standard 27001:2022 | 7.2, A.6.3 | | NIST Cybersecurity Framework v2.0 | PR.AT-01, ID.IM-01, ID.IM-02, ID.IM-03, ID.IM-04 | | ETSI Standard EN 319 401 V3.1.1 | REQ-7.2-04X, REQ-7.2-02, REQ-7.2-05X, REQ-7.2-07X, REQ-7.2-09X, REQ-7.2-12X | | CEN/TS 18026:2024 | HR-04, PM-01 | | BE-CyFun®2023 | BASIC: PR.AT-1.1
IMPORTANT: PR.AT-1.2, PR.AT-5.1, RC.IM-1.1
ESSENTIAL: PR.AT-1.3 | | FI-Kybermittari | WORKFORCE-1, WORKFORCE-2, WORKFORCE-3, WORKFORCE-4 | | EL- Ministerial decision 1689/2025 | Ministerial decision 1689/2025: articles 21b, 21c
Cybersecurity Handbook: Part B: 12.1, 12.2, 12.3, 12.4, 12.5
Self-assessment tool: 13.1, 13.2, 13.3, 13.4, 13.5, 13.6 | | ENS-Royal Decree 311/2022 | Article 15, Article 16
Annex II [mp.per.4] Training | | FR | 4.2-IE/EE
4.3-EE
4.4-IE/EE
15.1-IE/EE
15.2-EE
15.3-EE
15.4-EE |
|
1.1 Sklici
1.2 Ugotovljene zahteve
1.3 Povezani predpisi
2. Ugotovljene zahteve
3. Povezani predpisi
Povezane zadeve
|