Other tasks from the same security theme

Task name
Priority
Policy
Other requirements
General rules for the procurement of data systems
Critical
High
Normal
Low
Data system procurement
32
requirements

Examples of other requirements this task affects

Članak 30.1.e: Sigurnost u nabavi, razvoju i održavanju mrežnih i informacijskih sustava
NIS2 Croatia
4.2: Tietojärjestelmien hankinnat
TiHL tietoturvavaatimukset
9.3 §: Tietojärjestelmien hankinta ja kehittäminen
Kyberturvallisuuslaki
5.3.1: Information Security in new systems
TISAX
13 §: Tietoaineistojen ja tietojärjestelmien tietoturvallisuus
TiHL
See all related requirements and other information from tasks own page.
Go to >
General rules for the procurement of data systems
Rules for handling of data in non-production environments
Critical
High
Normal
Low
Data system procurement
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
Rules for handling of data in non-production environments
Source code reviews as part of acquisition procedures
Critical
High
Normal
Low
Data system procurement
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
Source code reviews as part of acquisition procedures
System testing as a part of acquisition procedure
Critical
High
Normal
Low
Data system procurement
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
System testing as a part of acquisition procedure
Security practices and methodologies for acquisition, development, and maintenance of ICT systems
Critical
High
Normal
Low
Data system procurement
1
requirements

Examples of other requirements this task affects

No items found.
See all related requirements and other information from tasks own page.
Go to >
Security practices and methodologies for acquisition, development, and maintenance of ICT systems
Testing of new systems before deployment
Critical
High
Normal
Low
Data system procurement
1
requirements

Examples of other requirements this task affects

Article 37: ICT systems acquisition, development, and maintenance
DORA simplified RMF
See all related requirements and other information from tasks own page.
Go to >
Testing of new systems before deployment
General rules for the acquisition of IoT devices
Critical
High
Normal
Low
Data system procurement
1
requirements

Examples of other requirements this task affects

2.3.10: Reduce the risk posed by IoT devices
NSM ICT-SP
See all related requirements and other information from tasks own page.
Go to >
General rules for the acquisition of IoT devices
Criteria for suppliers of high priority data systems
Critical
High
Normal
Low
Data system procurement
36
requirements

Examples of other requirements this task affects

Članak 30.1.d: Sigurnost lanca opskrbe
NIS2 Croatia
9.4 §: Toimitusketjun hallinta ja valvonta
Kyberturvallisuuslaki
1.3.3: Use of approved external IT services
TISAX
6.1.1: Partner Information security
TISAX
30 § 3.4°: La sécurité de la chaîne d'approvisionnement
NIS2 Belgium
See all related requirements and other information from tasks own page.
Go to >
Criteria for suppliers of high priority data systems
Security rules for the development and acquisition of data systems
Critical
High
Normal
Low
Data system procurement
41
requirements

Examples of other requirements this task affects

Članak 30.1.e: Sigurnost u nabavi, razvoju i održavanju mrežnih i informacijskih sustava
NIS2 Croatia
4.2: Tietojärjestelmien hankinnat
TiHL tietoturvavaatimukset
9.3 §: Tietojärjestelmien hankinta ja kehittäminen
Kyberturvallisuuslaki
5.3.1: Information Security in new systems
TISAX
13 §: Tietoaineistojen ja tietojärjestelmien tietoturvallisuus
TiHL
See all related requirements and other information from tasks own page.
Go to >
Security rules for the development and acquisition of data systems
Hankitun järjestelmän koodin tarkistettavuus (ST III-II)
Critical
High
Normal
Low
Data system procurement
1
requirements

Examples of other requirements this task affects

I13: Ohjelmistoilla toteutettavat pääsynhallintatoteutukset
Katakri
See all related requirements and other information from tasks own page.
Go to >
Hankitun järjestelmän koodin tarkistettavuus (ST III-II)
Comprehensiveness of contractual terms for cloud service provisioning
Critical
High
Normal
Low
Data system procurement
20
requirements

Examples of other requirements this task affects

Članak 30.1.e: Sigurnost u nabavi, razvoju i održavanju mrežnih i informacijskih sustava
NIS2 Croatia
30 § 3.5°: L'acquisition, du développement et de la maintenance des réseaux et des systèmes d'information
NIS2 Belgium
14.5.6): Tinklų ir informacinių sistemų saugumą
NIS2 Lithuania
27.(h): Droša sistēmas iegāde un izstrāde
NIS2 Latvia
Art. 24.2.e.1: Sicurezza dell'acquisizione
NIS2 Italy
See all related requirements and other information from tasks own page.
Go to >
Comprehensiveness of contractual terms for cloud service provisioning
Data processing agreement analysis for most important system providers
Critical
High
Normal
Low
Data system procurement
31
requirements

Examples of other requirements this task affects

Članak 30.1.d: Sigurnost lanca opskrbe
NIS2 Croatia
9.4 §: Toimitusketjun hallinta ja valvonta
Kyberturvallisuuslaki
6.1.1: Partner Information security
TISAX
9.5.1: Management of data transfer
TISAX
30 § 3.4°: La sécurité de la chaîne d'approvisionnement
NIS2 Belgium
See all related requirements and other information from tasks own page.
Go to >
Data processing agreement analysis for most important system providers
System portfolio management and proactive design of portfolio
Critical
High
Normal
Low
Data system procurement
2
requirements

Examples of other requirements this task affects

14.1.1: Information security requirements analysis and specification
ISO 27001
CC8.1: Change management procedures
SOC 2
See all related requirements and other information from tasks own page.
Go to >
System portfolio management and proactive design of portfolio
Requiring a system description from suppliers of important information systems to be acquired
Critical
High
Normal
Low
Data system procurement
22
requirements

Examples of other requirements this task affects

Članak 30.1.e: Sigurnost u nabavi, razvoju i održavanju mrežnih i informacijskih sustava
NIS2 Croatia
30 § 3.5°: L'acquisition, du développement et de la maintenance des réseaux et des systèmes d'information
NIS2 Belgium
2.1.10: Review the service provider’s security when outsourcing
NSM ICT-SP
2.1.1: Include security in the organisation’s procurement process
NSM ICT-SP
14.5.6): Tinklų ir informacinių sistemų saugumą
NIS2 Lithuania
See all related requirements and other information from tasks own page.
Go to >
Requiring a system description from suppliers of important information systems to be acquired

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way
Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.
Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.
Do it once - we automatically apply it to all current and future frameworks.
Get to know Cyberday
Start your free trial
Cyberday is your all-in-one solution for building a secure and compliant organization. Whether you're setting up a cyber security plan, evaluating policies, implementing tasks, or generating automated reports, Cyberday simplifies the entire process.
With AI-driven insights and a user-friendly interface, it's easier than ever to stay ahead of compliance requirements and focus on continuous improvement.
Clear framework compliance plans
Activate relevant frameworks and turn them into actionable policies tailored to your needs.
Credible reports to proof your compliance
Use guided tasks to ensure secure implementations and create professional reports with just a few clicks.
AI-powered improvement suggestions
Focus on the most impactful improvements in your compliance with help from Cyberday AI.