+2. Risk management policy (Article 21(2), point (a) of Directive (EU) 2022/2555)
---+2.1. Risk management framework
------+2.1.1. For the purpose of Article 21(2), point (a) of Directive (EU) 2022/2555, the relevant …
------+2.1.2. For the purpose of point 2.1.1, the relevant entities shall establish procedures for …
------+2.1.3. When identifying and prioritising appropriate risk treatment options and measures, the …
------+2.1.4. The relevant entities shall review and, where appropriate, update the risk assessment …
---+2.2. Compliance monitoring
------+2.2.1. The relevant entities shall regularly review the compliance with their policies on network …
------+2.2.2. The relevant entities shall put in place an effective compliance reporting system which …
------+2.2.3. The relevant entities shall perform the compliance monitoring at planned intervals and when …
---+2.3. Independent review of information and network security
------+2.3.1. The relevant entities shall review independently their approach to managing network and …
------+2.3.2. The relevant entities shall develop and maintain processes to conduct independent reviews …
------+2.3.3. The results of the independent reviews, including the results from the compliance monitoring …
------+2.3.4. The independent reviews shall take place at planned intervals and when significant incidents …
|
2. Risk management policy (Article 21(2), point (a) of Directive (EU) 2022/2555)
2. Risk management policy (Article 21(2), point (a) of Directive (EU) 2022/2555)
1. Översikt
1.1 Referenser
1.2 Identifierade krav
1.3 Relaterade standarder
2. Identifierade krav
3. Relaterade standarder
Länkade ärenden
|