Content library
Cyber security management
Establishment of security policies and measures (Portugal)
Risk management and leadership
Cyber security management

Establishment of security policies and measures (Portugal)

Start free trial

Task description

Establishment of security policies and measures (Portugal)

The organization must define, document, and formally approve its set of cybersecurity policies and measures. This comprehensive set of measures must be appropriate for the organization's size, risk profile, and complexity, and it must be based on the findings of the official risk analysis. When defining these measures, the organization must take into account the guidelines provided in the National Cybersecurity Reference Framework (QNRCS), the latest technical developments, and relevant international standards (e.g., ISO/IEC 27001).

Requirements connected to the task

29°.2: Adoção de medidas de cibersegurança
Regime jurídico da cibersegurança (Portugal)

Other tasks from the same security theme

Task name
Priority
Policy
Other requirements
Creation and maintenance of the information security plan report
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

3: Vastuut tietoturvan sekä asiakastietojen asianmukaisen käsittelyn varmistamisessa
Tietoturvasuunnitelma
See all related requirements and other information from tasks own page.
Go to >
Creation and maintenance of the information security plan report
Information security policy -report publishing, informing and maintenance
Critical
High
Normal
Low
Cyber security management
78
requirements

Examples of other requirements this task affects

5.1.1: Policies for information security
ISO 27001
5.1.2: Review of the policies for information security
ISO 27001
T01: Turvallisuusperiaatteet
Katakri
6.6: Yleiset
Omavalvontasuunnitelma
ID.GV-1: Cybersecurity policy
NIST
See all related requirements and other information from tasks own page.
Go to >
Information security policy -report publishing, informing and maintenance
Defining and documenting security objectives
Critical
High
Normal
Low
Cyber security management
52
requirements

Examples of other requirements this task affects

5.1.1: Policies for information security
ISO 27001
ID.BE-3: Organizational mission, objectives, and activities
NIST
ID.GV-1: Cybersecurity policy
NIST
HAL-01: Periaatteet
Julkri
5.1: Leadership and commitment
ISO 27001
See all related requirements and other information from tasks own page.
Go to >
Defining and documenting security objectives
Executing and documenting internal audits
Critical
High
Normal
Low
Cyber security management
69
requirements

Examples of other requirements this task affects

12.7.1: Information systems audit controls
ISO 27001
18.2.1: Independent review of information security
ISO 27001
ID.GV-3: Legal and regulatory requirements
NIST
HAL-07: Seuranta ja valvonta
Julkri
5.35: Independent review of information security
ISO 27001
See all related requirements and other information from tasks own page.
Go to >
Executing and documenting internal audits
Creating and maintaining a statement of applicability
Critical
High
Normal
Low
Cyber security management
6
requirements

Examples of other requirements this task affects

6.1: Information security risk management
ISO 27001
7.5: Requirements for documented information
ISO 27001
1.2.1: Scope of Information Security management
TISAX
6.1: Maatregelen om risico's en kansen aan te pakken
NEN 7510
7.5: Vereisten voor gedocumenteerde informatie
NEN 7510
See all related requirements and other information from tasks own page.
Go to >
Creating and maintaining a statement of applicability
Identification, documentation and management of other information security requirements
Critical
High
Normal
Low
Cyber security management
31
requirements

Examples of other requirements this task affects

18.1.1: Identification of applicable legislation and contractual requirements
ISO 27001
ID.GV-3: Legal and regulatory requirements
NIST
HAL-05: Vaatimukset
Julkri
5.31: Legal, statutory, regulatory and contractual requirements
ISO 27001
2: Lainsäädäntö ja velvoitteet
Digiturvan kokonaiskuvapalvelu
See all related requirements and other information from tasks own page.
Go to >
Identification, documentation and management of other information security requirements
Internal audit procedure -report publishing and maintenance
Critical
High
Normal
Low
Cyber security management
32
requirements

Examples of other requirements this task affects

ID.GV-3: Legal and regulatory requirements
NIST
7.5: Requirements for documented information
ISO 27001
9.2: Internal audit
ISO 27001
CC1.5: Accountability for responsibilities
SOC 2
Article 5: Governance and organisation
DORA
See all related requirements and other information from tasks own page.
Go to >
Internal audit procedure -report publishing and maintenance
ISMS description and maintenance
Critical
High
Normal
Low
Cyber security management
56
requirements

Examples of other requirements this task affects

5.1.1: Policies for information security
ISO 27001
PR.AT-5: Physical and cybersecurity personnel
NIST
HAL-02: Tehtävät ja vastuut
Julkri
HAL-07: Seuranta ja valvonta
Julkri
HAL-09: Dokumentointi
Julkri
See all related requirements and other information from tasks own page.
Go to >
ISMS description and maintenance
Defining the frameworks that serve as the basis of the management system
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

CC3.1: Sufficient specifying of objectives
SOC 2
See all related requirements and other information from tasks own page.
Go to >
Defining the frameworks that serve as the basis of the management system
Management reporting on information security
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

§ 15: Rapportering till ledningen
MSBFS 2020:6
See all related requirements and other information from tasks own page.
Go to >
Management reporting on information security
Delegating security decision-making authority
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

A1.c: Decision-making
CAF 4.0
See all related requirements and other information from tasks own page.
Go to >
Delegating security decision-making authority
Compliance with the regulatory guidelines of competent cybersecurity authorities
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

40°: Notificação obrigatória
NIS2 Portugal
See all related requirements and other information from tasks own page.
Go to >
Compliance with the regulatory guidelines of competent cybersecurity authorities
Providing the security managers information to a competent authority (Portugal)
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

31°: Designação do responsável de cibersegurança
NIS2 Portugal
See all related requirements and other information from tasks own page.
Go to >
Providing the security managers information to a competent authority (Portugal)
Establishment of security policies and measures (Portugal)
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

29°.2: Adoção de medidas de cibersegurança
NIS2 Portugal
See all related requirements and other information from tasks own page.
Go to >
Establishment of security policies and measures (Portugal)
Monitoring of technical and regulatory developments (Portugal)
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

29°.2: Adoção de medidas de cibersegurança
NIS2 Portugal
See all related requirements and other information from tasks own page.
Go to >
Monitoring of technical and regulatory developments (Portugal)
Cybersecurity management roles and responsibilities
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

§ 20.4.h: Určenie zodpovednosti za schvaľovanie bezpečnostných opatrení
NIS2 Slovakia
See all related requirements and other information from tasks own page.
Go to >
Cybersecurity management roles and responsibilities
Appointment and role of the cybersecurity manager
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

§ 20.4.a: Vymenovanie nezávislého manažéra kybernetickej bezpečnosti
NIS2 Slovakia
See all related requirements and other information from tasks own page.
Go to >
Appointment and role of the cybersecurity manager
Plan for remedying non-compliances
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

Člen 25: Ocena skladnosti in samoocenjevanje organizacij
NIS2 Slovenia
See all related requirements and other information from tasks own page.
Go to >
Plan for remedying non-compliances
Procedure for advisory assignments
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

§ 18 : Rådgivande uppdrag
NIS2 Åland
See all related requirements and other information from tasks own page.
Go to >
Procedure for advisory assignments
Principles for personal data protection audits
Critical
High
Normal
Low
Cyber security management
2
requirements

Examples of other requirements this task affects

Article 36.1-2: Auditing
PDPL
Article 17.3-4: Periodic assessment of processor compliance
PDPL
See all related requirements and other information from tasks own page.
Go to >
Principles for personal data protection audits
Establishing leadership roles in preparedness and security (Denmark)
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

§ 11: Koordinator for beredskab, cyberkoordinator og sikringskoordinatorer
Energisektor beredskabsbekendtgørelse
See all related requirements and other information from tasks own page.
Go to >
Establishing leadership roles in preparedness and security (Denmark)
Management approval of key risk and preparedness documentation
Critical
High
Normal
Low
Cyber security management
4
requirements

Examples of other requirements this task affects

§ 10: Ledelsesorganets forpligtelser
Energisektor beredskabsbekendtgørelse
§ 19: Beredskabs- og krisestyringsplaner
Energisektor beredskabsbekendtgørelse
§ 28: Godkendelse af risikovurderinger
Energisektor beredskabsbekendtgørelse
§ 18: Risiko- og sårbarhedsvurdering
Energisektor beredskabsbekendtgørelse
See all related requirements and other information from tasks own page.
Go to >
Management approval of key risk and preparedness documentation
Operational contact point management (Denmark-energy)
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

§ 73: Operationelt kontaktpunkt
Energisektor beredskabsbekendtgørelse
See all related requirements and other information from tasks own page.
Go to >
Operational contact point management (Denmark-energy)
External reporting process for the management system
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
External reporting process for the management system
Establishment of an independent security management body
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

Article 34.1: Establish independent security management institutions
CSL (China)
See all related requirements and other information from tasks own page.
Go to >
Establishment of an independent security management body
Compliance and government interaction protocol for security risks
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

Article 56: Measures to effect rectification and eliminate hidden dangers
CSL (China)
See all related requirements and other information from tasks own page.
Go to >
Compliance and government interaction protocol for security risks
Cooperation mechanisms to strengthen cybersecurity coordination
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

Article 29: Cybersecurity cooperation among network operators
CSL (China)
See all related requirements and other information from tasks own page.
Go to >
Cooperation mechanisms to strengthen cybersecurity coordination
Code of conduct for business ethics
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

Article 9: Cybersecurity protection obligations
CSL (China)
See all related requirements and other information from tasks own page.
Go to >
Code of conduct for business ethics
National cybersecurity ICT system usage (Poland)
Critical
High
Normal
Low
Cyber security management
2
requirements

Examples of other requirements this task affects

11: Zgłaszanie incydentów do CSIRT oraz odbiorców usług
NIS2 Poland
9: Współpraca z podmiotami Krajowego Systemu Cyberbezpieczeństwa
NIS2 Poland
See all related requirements and other information from tasks own page.
Go to >
National cybersecurity ICT system usage (Poland)
Regular security audits of IT systems (Poland)
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

15: Wymogi audytu bezpieczeństwa dla operatorów usług kluczowych
NIS2 Poland
See all related requirements and other information from tasks own page.
Go to >
Regular security audits of IT systems (Poland)
Qualifications of the auditor (Poland)
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

15: Wymogi audytu bezpieczeństwa dla operatorów usług kluczowych
NIS2 Poland
See all related requirements and other information from tasks own page.
Go to >
Qualifications of the auditor (Poland)
Notification of participation in information exchange agreements (Estonia)
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
Notification of participation in information exchange agreements (Estonia)
Regular review of the cyber security risk documentation
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

Article 13.7: Documenting cybersecurity
CRA
See all related requirements and other information from tasks own page.
Go to >
Regular review of the cyber security risk documentation
Documentation of risk assessment
Critical
High
Normal
Low
Cyber security management
9
requirements

Examples of other requirements this task affects

Article 13.3: Documenting risk assessment
CRA
11.7: Listei de active și riscuri
NIS2 Romania
12.2: Risk assessment measures
CER
§ 4-4: Krav til dokumentasjon
Sikkerhetsloven
§ 13: Riskbedömning
NIS2 Åland
See all related requirements and other information from tasks own page.
Go to >
Documentation of risk assessment
Provision of product information to the market surveillance authority
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

Article 13.22: Conformity
CRA
See all related requirements and other information from tasks own page.
Go to >
Provision of product information to the market surveillance authority
Single point of contact for reporting vulnerabilities
Critical
High
Normal
Low
Cyber security management
2
requirements

Examples of other requirements this task affects

Article 13.17: Single point of contact
CRA
See all related requirements and other information from tasks own page.
Go to >
Single point of contact for reporting vulnerabilities
Maintaining a coordinated vulnerability disclosure policy and reporting procedure
Critical
High
Normal
Low
Cyber security management
3
requirements

Examples of other requirements this task affects

Vuln.5: Coordinated vulnerability disclosure
CRA
§ 24.5: Hlásenie kybernetických hrozieb a zraniteľností
NIS2 Slovakia
See all related requirements and other information from tasks own page.
Go to >
Maintaining a coordinated vulnerability disclosure policy and reporting procedure
Cybersecurity requirements related to the use of AI
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

Article 12.1: High risk AI
CRA
See all related requirements and other information from tasks own page.
Go to >
Cybersecurity requirements related to the use of AI
Integration of change management procedures
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
Integration of change management procedures
Disciplinary process for non-conformance
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
Disciplinary process for non-conformance
Cyber security policy and procedure compliance requirements
Critical
High
Normal
Low
Cyber security management
4
requirements

Examples of other requirements this task affects

Article 10: Technical measures and other necessary measures to ensure secure and stable network operation
CSL (China)
§ 17: Standarder för kritiska verksamhetsutövare
NIS2 Åland
Article 23: Information security
PDPL
See all related requirements and other information from tasks own page.
Go to >
Cyber security policy and procedure compliance requirements
Security related policies and procedures for all assets
Critical
High
Normal
Low
Cyber security management
4
requirements

Examples of other requirements this task affects

Art. 13.2.1: Mesures permanentes de sécurité intérieure
Loi infrastructures critiques
§ 44: Politik for informationssystemsikkerhed
Energisektor beredskabsbekendtgørelse
See all related requirements and other information from tasks own page.
Go to >
Security related policies and procedures for all assets
Defining triggers for evaluating the information security management system
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
Defining triggers for evaluating the information security management system
Review of information security management system best practices
Critical
High
Normal
Low
Cyber security management
2
requirements

Examples of other requirements this task affects

§ 6.1: Sikkerhetsstyringssystem
NIS2 NO
See all related requirements and other information from tasks own page.
Go to >
Review of information security management system best practices
Defining system auditing roles and responsibilities
Critical
High
Normal
Low
Cyber security management
3
requirements

Examples of other requirements this task affects

15: Wymogi audytu bezpieczeństwa dla operatorów usług kluczowych
NIS2 Poland
Člen 49: Določitev revizorja informacijskih sistemov
NIS2 Slovenia
See all related requirements and other information from tasks own page.
Go to >
Defining system auditing roles and responsibilities
Reviewing security policies and procedures
Critical
High
Normal
Low
Cyber security management
4
requirements

Examples of other requirements this task affects

5.1: Beleid voor informatiebeveiliging
NEN 7510
§ 71: Politik og procedurer for sikkerhedsevaluering
Energisektor beredskabsbekendtgørelse
See all related requirements and other information from tasks own page.
Go to >
Reviewing security policies and procedures
Conducting business impact analysis
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
Conducting business impact analysis
Creating and maintaining an asset management policy
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
Creating and maintaining an asset management policy
Creating and maintaining physical and environmental security policy
Critical
High
Normal
Low
Cyber security management
2
requirements

Examples of other requirements this task affects

Člen 22.2.9: Upravljanje omrežja in komunikacij
NIS2 Slovenia
See all related requirements and other information from tasks own page.
Go to >
Creating and maintaining physical and environmental security policy
Creating and maintaining report on the review of the ICT risk management framework
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
Creating and maintaining report on the review of the ICT risk management framework
Develop and maintain an ICT project management policy
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
Develop and maintain an ICT project management policy
Requirements for creating policies
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
Requirements for creating policies
Establishing risk profile
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
Establishing risk profile
Safeguards to protect PHI
Critical
High
Normal
Low
Cyber security management
5
requirements

Examples of other requirements this task affects

5.12: Classificatie van informatie
NEN 7510
8.13: Back-up van informatie
NEN 7510
5.39: HLT – Unieke identificatie van zorgontvangers
NEN 7510
Article 26: Processing health data
PDPL
See all related requirements and other information from tasks own page.
Go to >
Safeguards to protect PHI
Security officer appointment and responsibilities (HIPAA)
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
Security officer appointment and responsibilities (HIPAA)
Evaluating compliance with HIPAA requirements
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
Evaluating compliance with HIPAA requirements
Establishing and maintaining the comprehensive ePHI security program
Critical
High
Normal
Low
Cyber security management
3
requirements

Examples of other requirements this task affects

5.12: Classificatie van informatie
NEN 7510
Article 26: Processing health data
PDPL
See all related requirements and other information from tasks own page.
Go to >
Establishing and maintaining the comprehensive ePHI security program
Protection from retaliation and intimidation
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
Protection from retaliation and intimidation
Protecting HIPAA rights from being waived
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
Protecting HIPAA rights from being waived
Implementation of policies and procedures
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
Implementation of policies and procedures
Policies and procedures for HIPAA compliance
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
Policies and procedures for HIPAA compliance
Appointing a qualified cybersecurity auditor (Malta)
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

14.1: Appointment and approval of a qualified auditor for the verification of cybersecurity measures
NIS2 Malta
See all related requirements and other information from tasks own page.
Go to >
Appointing a qualified cybersecurity auditor (Malta)
Designation of the information security officer (Spain)
Critical
High
Normal
Low
Cyber security management
3
requirements

Examples of other requirements this task affects

Artículo 16.1: Designación del responsable de la seguridad de la información
NIS2 Spain
Artículo 16.2: Comunicación de la designación del responsable
NIS2 Spain
Artículo 16.4: Cualificaciones y posición organizativa
NIS2 Spain
See all related requirements and other information from tasks own page.
Go to >
Designation of the information security officer (Spain)
Statement of applied security measures (Spain)
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

Artículo 15.5: Declaración de aplicabilidad de sistemas
NIS2 Spain
See all related requirements and other information from tasks own page.
Go to >
Statement of applied security measures (Spain)
Cybersecurity compliance requirements for essential and important entities (Spain)
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

Artículo 15.4: Demostración y certificación de cumplimiento
NIS2 Spain
See all related requirements and other information from tasks own page.
Go to >
Cybersecurity compliance requirements for essential and important entities (Spain)
Adoption and implementation of security measures
Critical
High
Normal
Low
Cyber security management
5
requirements

Examples of other requirements this task affects

Art. 13.3.4: Identification, sélection et priorisation des mesures de sécurité intérieure
Loi infrastructures critiques
§ 4-3.(1-2): Plikt til å gjennomføre sikkerhetstiltak
Sikkerhetsloven
§ 6: Hur informationssäkerhetsarbetet ska bedrivas
MSBFS 2020:6
§ 19.6.g: Implementácia bezpečnostných opatrení
NIS2 Slovakia
§ 29.2: Povinnosť auditu pri bezpečnostných zmenách
NIS2 Slovakia
See all related requirements and other information from tasks own page.
Go to >
Adoption and implementation of security measures
Risk-based selection of security measures
Critical
High
Normal
Low
Cyber security management
3
requirements

Examples of other requirements this task affects

Art. 13.3.4: Identification, sélection et priorisation des mesures de sécurité intérieure
Loi infrastructures critiques
§ 4-3.(1-2): Plikt til å gjennomføre sikkerhetstiltak
Sikkerhetsloven
29°.2: Adoção de medidas de cibersegurança
NIS2 Portugal
See all related requirements and other information from tasks own page.
Go to >
Risk-based selection of security measures
Security Plan development and implementation
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

Art. 13.4: Période de mise en œuvre des mesures de sécurité
Loi infrastructures critiques
See all related requirements and other information from tasks own page.
Go to >
Security Plan development and implementation
Security contact point for critical infrastructure
Critical
High
Normal
Low
Cyber security management
3
requirements

Examples of other requirements this task affects

Art. 12.1-3: Point de contact pour la sécurité
Loi infrastructures critiques
13.3: Designated personnel
CER
§ 73: Operationelt kontaktpunkt
Energisektor beredskabsbekendtgørelse
See all related requirements and other information from tasks own page.
Go to >
Security contact point for critical infrastructure
Development and maintenance of the Operator Security Plan (O.S.P.) (Belgium)
Critical
High
Normal
Low
Cyber security management
2
requirements

Examples of other requirements this task affects

Art. 13.1: Plan de sécurité de l'opérateur
Loi infrastructures critiques
Art. 13.6: Organisation des exercices et mise à jour de l'P.S.E.
Loi infrastructures critiques
See all related requirements and other information from tasks own page.
Go to >
Development and maintenance of the Operator Security Plan (O.S.P.) (Belgium)
Advance notification of planned cybersecurity audits
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

33.5: Ankündigung geplanter Prüfungen
NIS2 Austria
See all related requirements and other information from tasks own page.
Go to >
Advance notification of planned cybersecurity audits
Self-declaration submission (Austria)
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

33.1: Selbstdeklaration
NIS2 Austria
See all related requirements and other information from tasks own page.
Go to >
Self-declaration submission (Austria)
Proof Obligations for Operators of Critical Infrastructure (Germany)
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

39.1: Nachweispflichten für Betreiber kritischer Anlagen
NIS2 Germany
See all related requirements and other information from tasks own page.
Go to >
Proof Obligations for Operators of Critical Infrastructure (Germany)
Annual cybersecurity maturity self-assessment and reporting
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

12.4: Transmiterea autoevaluării anuale a maturității cibernetice
NIS2 Romania
See all related requirements and other information from tasks own page.
Go to >
Annual cybersecurity maturity self-assessment and reporting
Appointment of a Cyber Security Officer (Romania)
Critical
High
Normal
Low
Cyber security management
2
requirements

Examples of other requirements this task affects

14.3: Alocarea resurselor și desemnarea responsabililor de securitate
NIS2 Romania
14.4: Cerințe pentru responsabilul cu securitatea
NIS2 Romania
See all related requirements and other information from tasks own page.
Go to >
Appointment of a Cyber Security Officer (Romania)
Registration for official communication systems
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

Art. 9: Registrierung
CSV
See all related requirements and other information from tasks own page.
Go to >
Registration for official communication systems
Process for clarifying reporting obligations (Switzerland)
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

Art. 13: Einreichung von Unterlagen zur Abklärung der Meldepflicht
CSV
See all related requirements and other information from tasks own page.
Go to >
Process for clarifying reporting obligations (Switzerland)
Cooperation with supervisory authorities
Critical
High
Normal
Low
Cyber security management
5
requirements

Examples of other requirements this task affects

§ 4-5.2: Varsling av tilsynsmyndigheten
Sikkerhetsloven
§ 14: Opplysningsplikt og tilgang til lokaler og utstyr
NIS2 NO
Article 28: Technical support and assistance to public security organs
CSL (China)
Article 49: Complaint and reporting systems for network information security
CSL (China)
§ 19.6.c: Povinnosť spolupracovať
NIS2 Slovakia
See all related requirements and other information from tasks own page.
Go to >
Cooperation with supervisory authorities
Ensure the integrity of critical national information
Critical
High
Normal
Low
Cyber security management
2
requirements

Examples of other requirements this task affects

§ 5-2: Beskyttelse av skjermingsverdig informasjon
Sikkerhetsloven
§ 6-2: Beskyttelse av skjermingsverdige informasjonssystemer
Sikkerhetsloven
See all related requirements and other information from tasks own page.
Go to >
Ensure the integrity of critical national information
Notifying authorities of high-risk procurements
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

§ 9-4.2: Varsling til departementet
Sikkerhetsloven
See all related requirements and other information from tasks own page.
Go to >
Notifying authorities of high-risk procurements
Notify termination of security-sensitive activity
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

§ 2.6: Anmälningsplikt
SSL
See all related requirements and other information from tasks own page.
Go to >
Notify termination of security-sensitive activity
Notify start of security-sensitive activity
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

§ 2.6: Anmälningsplikt
SSL
See all related requirements and other information from tasks own page.
Go to >
Notify start of security-sensitive activity
Appointment and role of the Security Protection Manager
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

§ 2.7: Säkerhetsskyddschef
SSL
See all related requirements and other information from tasks own page.
Go to >
Appointment and role of the Security Protection Manager
Appointment of a Chief Information Security Officer (Greece)
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

15.5.α: Υπεύθυνος ασφάλειας πληροφοριών
NIS2 Greece
See all related requirements and other information from tasks own page.
Go to >
Appointment of a Chief Information Security Officer (Greece)
Review reporting of simplified ICT risk management framework
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

Article 41: Format and content of the report on the review of the simplified ICT risk management framework
DORA simplified RMF
See all related requirements and other information from tasks own page.
Go to >
Review reporting of simplified ICT risk management framework
ICT project management procedure
Critical
High
Normal
Low
Cyber security management
2
requirements

Examples of other requirements this task affects

Article 38: ICT project and change management
DORA simplified RMF
See all related requirements and other information from tasks own page.
Go to >
ICT project management procedure
Auditing of risk management framework
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

Article 28: Governance and organization
DORA simplified RMF
See all related requirements and other information from tasks own page.
Go to >
Auditing of risk management framework
Creation and maintenance of governance and control framework
Critical
High
Normal
Low
Cyber security management
2
requirements

Examples of other requirements this task affects

Article 28: Governance and organization
DORA simplified RMF
See all related requirements and other information from tasks own page.
Go to >
Creation and maintenance of governance and control framework
Notification of a significant incident with cross-border and cross-sectoral impact
Critical
High
Normal
Low
Cyber security management
5
requirements

Examples of other requirements this task affects

Članak 40: Obavještavanje o značajnom incidentu s prekograničnim i međusektorskim učinkom
NIS2 Croatia
15.3: Informații privind impactul transfrontalier al incidentelor
NIS2 Romania
See all related requirements and other information from tasks own page.
Go to >
Notification of a significant incident with cross-border and cross-sectoral impact
Conducting an external audit
Critical
High
Normal
Low
Cyber security management
5
requirements

Examples of other requirements this task affects

Članak 34: Provedba revizije kibernetičke sigurnosti
NIS2 Croatia
11.5: Auditului de securitate
NIS2 Romania
§ 29.1: Povinnosť a účel auditu kybernetickej bezpečnosti
NIS2 Slovakia
§ 29.5: Odovzdanie výsledkov auditu a nápravné opatrenia
NIS2 Slovakia
Člen 25: Ocena skladnosti in samoocenjevanje organizacij
NIS2 Slovenia
See all related requirements and other information from tasks own page.
Go to >
Conducting an external audit
Notifying the administrative body of incidents
Critical
High
Normal
Low
Cyber security management
2
requirements

Examples of other requirements this task affects

Art. 23.3: Comunicazione
NIS2 Italy
Article 56: Measures to effect rectification and eliminate hidden dangers
CSL (China)
See all related requirements and other information from tasks own page.
Go to >
Notifying the administrative body of incidents
Appointment of a Cyber Security Officer (Lithuania)
Critical
High
Normal
Low
Cyber security management
4
requirements

Examples of other requirements this task affects

15.2.: Paskirti saugos įgaliotinį
NIS2 Lithuania
15.3.: Kibernetinio saugumo vaidmenys ir atsakomybė
NIS2 Lithuania
15.4.: Kibernetinio saugumo valdymo užsakymas
NIS2 Lithuania
15.5.: Kibernetinio saugumo vadovas ir saugos įgaliotinis reikalavimai
NIS2 Lithuania
See all related requirements and other information from tasks own page.
Go to >
Appointment of a Cyber Security Officer (Lithuania)
Appointment of a Chief Information Security Officer (Lithuania)
Critical
High
Normal
Low
Cyber security management
4
requirements

Examples of other requirements this task affects

15.1.: Paskirti kibernetinio saugumo vadovą
NIS2 Lithuania
15.3.: Kibernetinio saugumo vaidmenys ir atsakomybė
NIS2 Lithuania
15.4.: Kibernetinio saugumo valdymo užsakymas
NIS2 Lithuania
15.5.: Kibernetinio saugumo vadovas ir saugos įgaliotinis reikalavimai
NIS2 Lithuania
See all related requirements and other information from tasks own page.
Go to >
Appointment of a Chief Information Security Officer (Lithuania)
Cybersecurity auditing (Lithuania)
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

14.8.: Kibernetinio saugumo auditai
NIS2 Lithuania
See all related requirements and other information from tasks own page.
Go to >
Cybersecurity auditing (Lithuania)
Technical cyber security measures (Lithuania)
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

16.4.: Esminiai subjektai sudary sąlygas Nacionaliniam kibernetinio saugumo centrui technines kibernetinio saugumo priemones
NIS2 Lithuania
See all related requirements and other information from tasks own page.
Go to >
Technical cyber security measures (Lithuania)
Usage of data centers (Lithuania)
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

38.1.: Duomenų centrų naudojimas saugaus tinklo naudotojams
NIS2 Lithuania
See all related requirements and other information from tasks own page.
Go to >
Usage of data centers (Lithuania)
Usage of the Secure Network (Lithuania)
Critical
High
Normal
Low
Cyber security management
1
requirements

Examples of other requirements this task affects

37.1.: Saugus institucijų tinklas (Valstybės ir savivaldybių institucijos ir įstaigos, valstybės valdomos įmonės ir viešosios įstaigos)
NIS2 Lithuania
See all related requirements and other information from tasks own page.
Go to >
Usage of the Secure Network (Lithuania)
Cyber Security Information System usage (Lithuania)
Critical
High
Normal
Low
Cyber security management
3
requirements

Examples of other requirements this task affects

19.1.: Kibernetinio saugumo informacinė sistema
NIS2 Lithuania
19.3.: Kibernetinio saugumo informacinės sistemos naudojimas
NIS2 Lithuania
19.4.: Dalijimosi informacija susitarimai
NIS2 Lithuania
See all related requirements and other information from tasks own page.
Go to >
Cyber Security Information System usage (Lithuania)
Providing the security managers information to a competent authority
Critical
High
Normal
Low
Cyber security management
3
requirements

Examples of other requirements this task affects

25.(2): Paziņojums par kiberdrošības vadītāja iecelšanu
NIS2 Latvia
25.(3): Kiberdrošības pārvaldnieka atbilstība
NIS2 Latvia
25.(4): Paziņojums par izmaiņām
NIS2 Latvia
See all related requirements and other information from tasks own page.
Go to >
Providing the security managers information to a competent authority
Appointment, tasks and position of a Cyber security manager
Critical
High
Normal
Low
Cyber security management
2
requirements

Examples of other requirements this task affects

25.(1): Kiberdrošības pārvaldību
NIS2 Latvia
25.(5): kiberdrošības pārvaldnieka pienākumi
NIS2 Latvia
See all related requirements and other information from tasks own page.
Go to >
Appointment, tasks and position of a Cyber security manager

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way‍
Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.
Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.
Do it once - we automatically apply it to all current and future frameworks.
Start free trial
Get to know Cyberday
Start your free trial
Cyberday is your all-in-one solution for building a secure and compliant organization. Whether you're setting up a cyber security plan, evaluating policies, implementing tasks, or generating automated reports, Cyberday simplifies the entire process.
With AI-driven insights and a user-friendly interface, it's easier than ever to stay ahead of compliance requirements and focus on continuous improvement.
Clear framework compliance plans
Activate relevant frameworks and turn them into actionable policies tailored to your needs.
Credible reports to proof your compliance
Use guided tasks to ensure secure implementations and create professional reports with just a few clicks.
AI-powered improvement suggestions
Focus on the most impactful improvements in your compliance with help from Cyberday AI.
Effortless compliance improvement
Widest framework library in EU
Extensive support

Start your compliance journey

Use in MS Teams or use your browser with Slack integration.
Risk free trial. No credit card required. Stop at any time.

Start free trial
Book a meeting
How it works?
SummarySecurity tasks and assuranceDocumentation workflowsEmployee guidelinesReporting templatesTrust center
Use cases
By frameworkAll frameworksISO 27001NIS2 directiveNIST CSFCSA CCMISO 27701GDPRISO 27017ISO 27018
By methodCyber risk managementEmployee awarenessCompliance reportingControl managementAsset managementPrivacy managementVendor assessmentsInternal audits
Resources
AcademyWebinarsBlogHelp articlesVideo coursesContent libraryGuidesNewsletterLeave a reviewPartner programTeamTerms of usePrivacy policy
Contact us
+358 10 231 6010
team@cyberday.ai
App works in:
Known in Finland as Digiturvamalli
© Cyberday Inc. Kalevantie 2 33100 Tampere, Finland
Cyberday.ai - Improve and certify your cyber security