+1. Policy on the security of network and information systems
---+1.1 Policy on the security of network and information systems
------+1.1.1 For the purpose of Article 21(2), point (a) of Directive (EU) 2022/2555, the policy on the security …
------+1.1.2 The network and information system security policy shall be reviewed and, where appropriate …
---+1.2 Roles, responsibilities and authorities
------+1.2.1 As part of their policy on the security of network and information systems referred to in point …
------+1.2.2 The relevant entities shall require all personnel and third parties to apply network and …
------+1.2.3 At least one person shall report directly to the management bodies on matters of network and …
------+1.2.4 Depending on the size of the relevant entities, network and information system security shall be …
------+1.2.5 Conflicting duties and conflicting areas of responsibility shall be segregated, where applicable.
------+1.2.6 Roles, responsibilities and authorities shall be reviewed and, where appropriate, updated by …

1. Policy on the security of network and information systems

Policy on the security of network and information systems

1. Översikt

1.1 Policy on the security of network and information systems

Mapping to standards and frameworks

ISO standard 27001:20225.2, A.5.1, A.5.36, A.5.4, 9.3
NIST Cybersecurity Framework v2.0PR.AT-02, GV.PO-01, GV.PO-02, GV.OC-03, GV.RM-03, GV.OC-02, ID.IM-01, ID.IM-02, ID.IM-03, ID.IM-04
ETSI Standard EN 319 401 V3.1.1REQ 6.1-02, REQ 6.1-06, REQ 6.1-07, REQ 6.1-08, Clause 6.3
CEN/TS 18026:2024ISP-01, ISP-02, OPS-01, OPS-02, OPS-03
BE-CyFun®2023BASIC: ID.GV-1.1
IMPORTANT: ID.GV-1.2, PR.IP-5.1, PR.IP-6.1, PR.PT-2.1, PR.AT-4.1
ESSENTIAL: PR.PT-3.3, PR.PT-4.3
FI-KybermittariWORKFORCE-3, PROGRAM-1, PROGRAM-2, Management activities, CRITICAL-2, ARCHITECTURE-1
EL- Ministerial decision 1689/2025Ministerial decision 1689/2025: articles 6a, 6b, 6c
Cybersecurity handbook: Part A: 2, Part B: 1.1, 1.5, 2.1, 3.1, 4.1, 5.1, 6.1, 7.1, 8.1, 9.1, 10.1, 11.1, 12.1, 13.1, 14.1, 15.1, 16.1, 17.1, 18.1
Self assessment tool: 1.7, 1.8, 1.9, 1.10, 1.11, 1.12, 1.13, 2.1, 2.2, 3.1, 4.1, 5.1, 6.1, 7.1, 8.1, 9.1, 10.1, 11.1, 12.1, 13.1, 14.1, 15.1, 16.1, 17.1, 18.1, 19.1
ENS-Royal Decree 311/2022Article 5, Article 6, Article 10, Article 12, Article 27,
Annex II: [org.1] Security policy, [org.2] Security regulations, [org.3] Security procedures
FR2.B.1-IE/EE
2.B.2-IE/EE
2.B.3-IE/EE
2.B.4-IE/EE
2.B.5-IE/EE
2.C.1-IE/EE
2.C.2-IE/EE
2.C.3-IE/EE
1.2 Roles, responsibilities and authorities

Mapping to standards and frameworks

ISO standard 27001:20225.3, A.5.2, A.5.3, A.5.4
NIST Cybersecurity Framework v2.0GV.RR-02, GV.SC-02, PR.AT-02, ID.IM-01, ID.IM-02, ID.IM-03, ID.IM-04
ETSI Standard EN 319 401 V3.1.1REQ-7.1.2-01, REQ-7.2-01X, REQ-7.2-03X, REQ 7.2-07X, REQ 7.2-08X, REQ 7.2-09X, REQ 7.2-10X, REQ 7.2-11X, REQ 7.2-12X, REQ 7.2-13X, REQ-7.2-14X, REQ-7.2-15X
CEN/TS 18026:2024ISP-02, OIS-02
BE-CyFun®2023BASIC: RS.RP-1.1
IMPORTANT: ID.AM-6.1, PR.AT-2.1, PR.AT-4.1, PR.AT-5.1, RS.CO-1.1
FI-KybermittariPROGRAM-1, PROGRAM-2, CRITICAL-2, WORKFORCE-2 WORKFORCE-3
EL- Ministerial decision 1689/2025Ministerial decision 1689/2025: articles 7a, 7b, 7c
Cybersecurity handbook: Part A: 2, Part B: 1.1, 2.1, 3.1, 4.1, 5.1, 6.1, 7.1, 8.1, 9.1, 10.1, 11.1, 12.1, 13.1, 14.1, 15.1, 16.1, 17.1, 18.1
Self assessment tool: 1.1, 1.2, 1.3, 1.4, 1.5
ENS-Royal Decree 311/2022Article 11, Article 13
Annex II: [org.1] Security policy
FR2.A.1-IE/EE
2.A.2-EE
2.A.3-IE/EE
2.B.2-IE/EE
4.3-EE
4.4-IE/EE
4.5-IE/EE

1.1 Referenser

1.2 Identifierade krav

1.3 Relaterade regleringar

2. Identifierade krav

Krav

3. Relaterade regleringar

Regleringar

Länkade ärenden

Länkar
is related to 1. Policy on the security of network and information systems (Article 21(2), point (a) of Directive …