DORA, Article 15, DE

The ESAs shall, through the Joint Committee, in consultation with the European Union Agency on Cybersecurity (ENISA), develop common draft regulatory technical standards in order to:

(a)

specify further elements to be included in the ICT security policies, procedures, protocols and tools referred to in Article 9(2), with a view to ensuring the security of networks, enable adequate safeguards against intrusions and data misuse, preserve the availability, authenticity, integrity and confidentiality of data, including cryptographic techniques, and guarantee an accurate and prompt data transmission without major disruptions and undue delays;

(b)

develop further components of the controls of access management rights referred to in Article 9(4), point (c), and associated human resource policy specifying access rights, procedures for granting and revoking rights, monitoring anomalous behaviour in relation to ICT risk through appropriate indicators, including for network use patterns, hours, IT activity and unknown devices;

(c)

develop further the mechanisms specified in Article 10(1) enabling a prompt detection of anomalous activities and the criteria set out in Article 10(2) triggering ICT-related incident detection and response processes;

(d)

specify further the components of the ICT business continuity policy referred to in Article 11(1);

(e)

specify further the testing of ICT business continuity plans referred to in Article 11(6) to ensure that such testing duly takes into account scenarios in which the quality of the provision of a critical or important function deteriorates to an unacceptable level or fails, and duly considers the potential impact of the insolvency, or other failures, of any relevant ICT third-party service provider and, where relevant, the political risks in the respective providers’ jurisdictions;

(f)

specify further the components of the ICT response and recovery plans referred to in Article 11(3);

(g)

Official source

Version: 7669e933de66a0a1

SHA-256: sha256:7669e933de66a0a1451fc12b1c64ebc956f1cb2c4581cabd3d1a845968fa412d

• Article 1
• Article 2
• Article 3
• Article 4
• Article 5
• Article 6
• Article 7
• Article 8
• Article 9
• Article 10
• Article 11
• Article 12
• Article 13
• Article 14
• Article 16
• Article 17
• Article 18
• Article 19
• Article 20
• Article 21
• Article 22
• Article 23
• Article 24
• Article 25
• Article 26
• Article 27
• Article 28
• Article 29
• Article 30
• Article 31
• Article 32
• Article 33
• Article 34
• Article 35
• Article 36
• Article 37
• Article 38
• Article 39
• Article 40
• Article 41
• Article 42
• Article 43
• Article 44
• Article 45
• Article 46
• Article 47
• Article 48
• Article 49
• Article 50
• Article 51
• Article 52
• Article 53
• Article 54
• Article 55
• Article 56
• Article 57
• Article 58
• Article 59
• Article 60
• Article 61
• Article 62
• Article 63
• Article 64

Geographical article agents

Source: NovaCopilot