§ 104: Fortrolige oplysninger

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

Fortrolig information jf. § 26 i lov om styrket beredskab i energisektoren, skal opbevares, håndteres og behandles på en måde, der sikrer fortrolighed, integritet og tilgængelighed.

Stk. 2. Indsigt i fortrolig information må kun gives til personer, for hvem en sådan indsigt er tjenestelig nødvendig, eller som kan gøre lovkrav herpå.

Stk. 3. Fortrolig information i fysisk og digital dokumentform skal bære tydelig mærkning af materialets fortrolighed.

Stk. 4. Dokumenter efter stk. 3 og bærbare digitale lagringsmedier, der har været anvendt til at lagre fortrolig information, som ikke længere benyttes, skal destrueres eller bortskaffes på sikker vis i overensstemmelse med materialets fortrolighed, medmindre andet følger af lov eller bestemmelser fastsat i medfør af lov.

Stk. 5. Hvis der konstateres eller er mistanke om kompromittering af fortroligheden og integriteten af fortrolig information, skal der foretages en vurdering af, hvorvidt kompromitteringen kan udgøre en trussel for driften af virksomheden eller energiforsyningen lokalt, regionalt, nationalt eller på europæisk niveau. For fortrolig information hos virksomheder foretages denne vurdering af virksomheden, som uden unødigt ophold skal underrette Energistyrelsen herom. For anden fortrolig information foretages vurderingen af Energistyrelsen.

Best practices
How to implement:
§ 104: Fortrolige oplysninger
This policy on
§ 104: Fortrolige oplysninger
provides a set concrete tasks you can complete to secure this topic. Follow these best practices to ensure compliance and strengthen your overall security posture.

Fortrolig information jf. § 26 i lov om styrket beredskab i energisektoren, skal opbevares, håndteres og behandles på en måde, der sikrer fortrolighed, integritet og tilgængelighed.

Stk. 2. Indsigt i fortrolig information må kun gives til personer, for hvem en sådan indsigt er tjenestelig nødvendig, eller som kan gøre lovkrav herpå.

Stk. 3. Fortrolig information i fysisk og digital dokumentform skal bære tydelig mærkning af materialets fortrolighed.

Stk. 4. Dokumenter efter stk. 3 og bærbare digitale lagringsmedier, der har været anvendt til at lagre fortrolig information, som ikke længere benyttes, skal destrueres eller bortskaffes på sikker vis i overensstemmelse med materialets fortrolighed, medmindre andet følger af lov eller bestemmelser fastsat i medfør af lov.

Stk. 5. Hvis der konstateres eller er mistanke om kompromittering af fortroligheden og integriteten af fortrolig information, skal der foretages en vurdering af, hvorvidt kompromitteringen kan udgøre en trussel for driften af virksomheden eller energiforsyningen lokalt, regionalt, nationalt eller på europæisk niveau. For fortrolig information hos virksomheder foretages denne vurdering af virksomheden, som uden unødigt ophold skal underrette Energistyrelsen herom. For anden fortrolig information foretages vurderingen af Energistyrelsen.

Read below what concrete actions you can take to improve this ->
Frameworks that include requirements for this topic:
No items found.

How to improve security around this topic

In Cyberday, requirements and controls are mapped to universal tasks. A set of tasks in the same topic create a Policy, such as this one.

Here's a list of tasks that help you improve your information and cyber security related to
§ 104: Fortrolige oplysninger
Task name
Priority
Task completes
Complete these tasks to increase your compliance in this policy.
Critical
No other tasks found.

How to comply with this requirement

In Cyberday, requirements and controls are mapped to universal tasks. Each requirement is fulfilled with one or multiple tasks.

Here's a list of tasks that help you comply with the requirement
§ 104: Fortrolige oplysninger
of the framework  
Bekendtgørelse om modstandsdygtighed og beredskab i energisektoren (Danmark)
Task name
Priority
Task completes
Complete these tasks to increase your compliance in this policy.
Critical
Maintaining confidentiality agreements
Critical
High
Normal
Low
Definition of data classifications and class-specific security procedures
Critical
High
Normal
Low
44
requirements
Management of data sets
Data classification

Definition of data classifications and class-specific security procedures

This task helps you comply with the following requirements

Safe destruction of data
Critical
High
Normal
Low
Reporting security breach to authorities
Critical
High
Normal
Low
Strong authentication for processing or storage areas of highly confidential information
Critical
High
Normal
Low
20
requirements
Physical security
Property security

Strong authentication for processing or storage areas of highly confidential information

This task helps you comply with the following requirements

Archiving and destruction processes for data sets
Critical
High
Normal
Low
18
requirements
Management of data sets
Management of data sets

Archiving and destruction processes for data sets

This task helps you comply with the following requirements

Identification of confidential information
Critical
High
Normal
Low
3
requirements
Management of data sets
Data classification

Identification of confidential information

This task helps you comply with the following requirements

The ISMS component hierachy

When building an ISMS, it's important to understand the different levels of information hierarchy. Here's how Cyberday is structured.

Framework

Sets the overall compliance standard or regulation your organization needs to follow.

Requirements

Break down the framework into specific obligations that must be met.

Tasks

Concrete actions and activities your team carries out to satisfy each requirement.

Policies

Documented rules and practices that are created and maintained as a result of completing tasks.

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way
Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.
Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.
Do it once - we automatically apply it to all current and future frameworks.