Article 35: Data, system and network security

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

The financial entities referred to in Article 16(1) of Regulation (EU) 2022/2554 shall, as part of their systems, protocols, and tools, develop and implement safeguards that ensure the security of networks against intrusions and data misuse and that preserve the availability, authenticity, integrity, and confidentiality of data. In particular, financial entities shall, taking into account the classification referred to in Article 30(1) of this Regulation, establish all of the following:

(a) the identification and implementation of measures to protect data in use, in transit, and at rest;

(b) the identification and implementation of security measures regarding the use of software, data storage media, systems and endpoint devices that transfer and store data of the financial entity;

(c) the identification and implementation of measures to prevent and detect unauthorised connections to the financial entity’s network, and to secure the network traffic between the financial entity’s internal networks and the internet and other external connections;

(d) the identification and implementation of measures that ensure the availability, authenticity, integrity, and confidentiality of data during network transmissions;

(e) a process to securely delete data on premises, or that are stored externally, that the financial entity no longer needs to collect or store;

(f) a process to securely dispose of, or decommission, data storage devices on premises, or data storage devices that are stored externally, that contain confidential information;

(g) the identification and implementation of measures to ensure that teleworking and the use of private endpoint devices does not adversely impact the financial entity’s ability to carry out its critical activities in an adequate, timely, and secure manner.

See how Cyberday guides you to fulfill this requirement:
This requirement is part of the framework:  
DORA simplified RMF
Best practices
How to implement:
Article 35: Data, system and network security
This policy on
Article 35: Data, system and network security
provides a set concrete tasks you can complete to secure this topic. Follow these best practices to ensure compliance and strengthen your overall security posture.

The financial entities referred to in Article 16(1) of Regulation (EU) 2022/2554 shall, as part of their systems, protocols, and tools, develop and implement safeguards that ensure the security of networks against intrusions and data misuse and that preserve the availability, authenticity, integrity, and confidentiality of data. In particular, financial entities shall, taking into account the classification referred to in Article 30(1) of this Regulation, establish all of the following:

(a) the identification and implementation of measures to protect data in use, in transit, and at rest;

(b) the identification and implementation of security measures regarding the use of software, data storage media, systems and endpoint devices that transfer and store data of the financial entity;

(c) the identification and implementation of measures to prevent and detect unauthorised connections to the financial entity’s network, and to secure the network traffic between the financial entity’s internal networks and the internet and other external connections;

(d) the identification and implementation of measures that ensure the availability, authenticity, integrity, and confidentiality of data during network transmissions;

(e) a process to securely delete data on premises, or that are stored externally, that the financial entity no longer needs to collect or store;

(f) a process to securely dispose of, or decommission, data storage devices on premises, or data storage devices that are stored externally, that contain confidential information;

(g) the identification and implementation of measures to ensure that teleworking and the use of private endpoint devices does not adversely impact the financial entity’s ability to carry out its critical activities in an adequate, timely, and secure manner.

Read below what concrete actions you can take to improve this ->
Frameworks that include requirements for this topic:
No items found.

How to improve security around this topic

In Cyberday, requirements and controls are mapped to universal tasks. A set of tasks in the same topic create a Policy, such as this one.

Here's a list of tasks that help you improve your information and cyber security related to
Article 35: Data, system and network security
Task name
Priority
Task completes
Complete these tasks to increase your compliance in this policy.
Critical
No other tasks found.

How to comply with this requirement

In Cyberday, requirements and controls are mapped to universal tasks. Each requirement is fulfilled with one or multiple tasks.

Here's a list of tasks that help you comply with the requirement
Article 35: Data, system and network security
of the framework  
DORA simplified RMF
Task name
Priority
Task completes
Complete these tasks to increase your compliance in this policy.
Critical
Selection and use of malware detection software on all devices
Critical
High
Normal
Low
65
requirements
Technical cyber security
Malware protection

Selection and use of malware detection software on all devices

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Rules ensuring secure network data transfer
Critical
High
Normal
Low
9
requirements
Management of data sets
Management of data sets

Rules ensuring secure network data transfer

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Encryption of laptops
Critical
High
Normal
Low
45
requirements
Technical cyber security
Encryption

Encryption of laptops

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Choosing and using network protection systems
Critical
High
Normal
Low
40
requirements
Technical cyber security
Virtualization

Choosing and using network protection systems

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Security of teleworking and privatively owned endpoints
Critical
High
Normal
Low
1
requirements
Remote work and mobile devices
Mobile device management

Security of teleworking and privatively owned endpoints

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Safe destruction of data
Critical
High
Normal
Low
5
requirements
Management of data sets
Management of data sets

Safe destruction of data

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Using trust-based access control
Critical
High
Normal
Low
5
requirements
System management
Access control and authentication

Using trust-based access control

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Encryption and addressing protections for secure data transfer
Critical
High
Normal
Low
9
requirements
Technical cyber security
Encryption

Encryption and addressing protections for secure data transfer

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Arranging suitable equipment and storage equipment for teleworking
Critical
High
Normal
Low
10
requirements
Remote work and mobile devices
Remote work

Arranging suitable equipment and storage equipment for teleworking

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Endpoint security management system
Critical
High
Normal
Low
27
requirements
Remote work and mobile devices
Mobile device management

Endpoint security management system

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Encryption of portable media
Critical
High
Normal
Low
30
requirements
Technical cyber security
Encryption

Encryption of portable media

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Smartphone and tablet encryption
Critical
High
Normal
Low
6
requirements
Technical cyber security
Encryption

Smartphone and tablet encryption

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Defining suitable locations and needed protections for remote work
Critical
High
Normal
Low
8
requirements
Remote work and mobile devices
Remote work

Defining suitable locations and needed protections for remote work

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Documentation of interfaces for data systems
Critical
High
Normal
Low
53
requirements
System management
Data system management

Documentation of interfaces for data systems

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Protection of data in transit
Critical
High
Normal
Low
49
requirements
Technical cyber security
Encryption

Protection of data in transit

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Measures for data transfer of services in accordance with information security goals
Critical
High
Normal
Low
2
requirements
Development and cloud
Cloud service management

Measures for data transfer of services in accordance with information security goals

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

Use of a DLP-system
Critical
High
Normal
Low
11
requirements
Email and phishing
Email and web browser

Use of a DLP-system

Completing this task also progresses your compliance in all of the following frameworks and requirements. Cyberday automatically maps completed tasks to all of these current and future frameworks - so you do not have to do it again!

The ISMS component hierachy

When building an ISMS, it's important to understand the different levels of information hierarchy. Here's how Cyberday is structured.

Framework

Sets the overall compliance standard or regulation your organization needs to follow.

Requirements

Break down the framework into specific obligations that must be met.

Tasks

Concrete actions and activities your team carries out to satisfy each requirement.

Policies

Documented rules and practices that are created and maintained as a result of completing tasks.

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way
Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.
Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.
Do it once - we automatically apply it to all current and future frameworks.