Bekendtgørelse om modstandsdygtighed og beredskab i energisektoren (Danmark)

Requirement

§ 59: Backup af kritiske systemer

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

Virksomheder skal tage backup af virksomhedens forsyningskritiske net- og informationssystemer og netværkskonfigurationer, så virksomheden kan genoprette systemerne og netværksinfrastrukturen for forsyningskritiske net- og informationssystemer.

Stk. 2. Backups efter stk. 1 skal beskyttes og opbevares på sikker vis i henhold til kritikaliteten af det forsyningskritiske net- og informationssystem eller netværkskonfiguration, der tages backup af.

Stk. 3. Virksomheder i niveau 4 og 5 skal tage backup efter stk. 1 i flere kopier, så virksomheden kan tilgå backups, uagtet om det forsyningskritiske net- og informationssystem eller netværkskonfiguration, som der tages backup af, er utilgængelig eller kompromitteret. Backups skal opbevares særskilt, eksempelvis som offline kopier.

Fulfill this requirement by completing the tasks below ->

This requirement is part of the framework:

Bekendtgørelse om modstandsdygtighed og beredskab i energisektoren (Danmark)

Other requirements of the framework

§ 59: Backup af kritiske systemer

Best practices

How to implement:

§ 59: Backup af kritiske systemer

This policy on

§ 59: Backup af kritiske systemer

provides a set concrete tasks you can complete to secure this topic. Follow these best practices to ensure compliance and strengthen your overall security posture.

Virksomheder skal tage backup af virksomhedens forsyningskritiske net- og informationssystemer og netværkskonfigurationer, så virksomheden kan genoprette systemerne og netværksinfrastrukturen for forsyningskritiske net- og informationssystemer.

Stk. 2. Backups efter stk. 1 skal beskyttes og opbevares på sikker vis i henhold til kritikaliteten af det forsyningskritiske net- og informationssystem eller netværkskonfiguration, der tages backup af.

Stk. 3. Virksomheder i niveau 4 og 5 skal tage backup efter stk. 1 i flere kopier, så virksomheden kan tilgå backups, uagtet om det forsyningskritiske net- og informationssystem eller netværkskonfiguration, som der tages backup af, er utilgængelig eller kompromitteret. Backups skal opbevares særskilt, eksempelvis som offline kopier.

Read below what concrete actions you can take to improve this ->

Frameworks that include requirements for this topic:

No items found.

How to improve security around this topic

In Cyberday, requirements and controls are mapped to universal tasks. A set of tasks in the same topic create a Policy, such as this one.

Here's a list of tasks that help you improve your information and cyber security related to

§ 59: Backup af kritiske systemer

Task name

Priority

Task completes

Complete these tasks to increase your compliance in this policy.

Critical

No other tasks found.

Complete these tasks in Cyberday ISMS ->

How to comply with this requirement

In Cyberday, requirements and controls are mapped to universal tasks. Each requirement is fulfilled with one or multiple tasks.

Here's a list of tasks that help you comply with the requirement

§ 59: Backup af kritiske systemer

of the framework

Bekendtgørelse om modstandsdygtighed og beredskab i energisektoren (Danmark)

Task name

Priority

Task completes

Complete these tasks to increase your compliance in this policy.

Critical

Regular testing, evaluation, and recovery instructions for backups

Critical

High

Normal

Low

Technical cyber security

Backups

Regular testing, evaluation, and recovery instructions for backups

This task helps you comply with the following requirements

12.1.1: Documented operating procedures ISO 27001

12.3.1: Information backup ISO 27001

PR.IP-4: Backups NIST

TEK-20: Varmuuskopiointi Julkri

8.13: Information backup ISO 27001

Documenting and delegating ownership of own backup processes

Critical

High

Normal

Low

Technical cyber security

Backups

Documenting and delegating ownership of own backup processes

This task helps you comply with the following requirements

12.3: Backup ISO 27001

12.3.1: Information backup ISO 27001

I24: Varmuuskopiointi Katakri

PR.IP-4: Backups NIST

TEK-20: Varmuuskopiointi Julkri

Establishing and maintaining an isolated instance of recovery data

Critical

High

Normal

Low

Technical cyber security

Security systems and logging

Establishing and maintaining an isolated instance of recovery data

This task helps you comply with the following requirements

11.4: Establish and Maintain an Isolated Instance of Recovery Data CIS 18

B5.c: Backups CAF 4.0

§ 59: Backup af kritiske systemer Energisektor beredskabsbekendtgørelse

§ 19.3: Væsentlige procedurer for håndtering af hændelser Energisektor beredskabsbekendtgørelse

Performing automated backups of enterprise assets

Critical

High

Normal

Low

Technical cyber security

Backups

Performing automated backups of enterprise assets

This task helps you comply with the following requirements

11.2: Perform Automated Backups CIS 18

§ 3.1.15: Redundans och återställning MSBFS 2020:7

§ 3.1.9: Säkerhetskopiering MSBFS 2020:7

§ 4.14: Säkerhetskopiering av data MSBFS 2020:7

Člen 22.2.5: Upravljanje varnostnih kopij NIS2 Slovenia

Protecting backups against intentional and unintentional deletion and manipulation

Critical

High

Normal

Low

Technical cyber security

Backups

Protecting backups against intentional and unintentional deletion and manipulation

This task helps you comply with the following requirements

2.9.4: Protect backups against intentional and unintentional deletion, manipulation and reading NSM ICT-SP

§ 13: Åtgärder för att upprätthålla kontinuitet under incidenter och kriser MSBFS 2020:6

§ 3.1.9: Säkerhetskopiering MSBFS 2020:7

§ 4.14: Säkerhetskopiering av data MSBFS 2020:7

§ 4.15: Skydd av säkerhetskopior MSBFS 2020:7

Protect critical services with their own data flow

Critical

High

Normal

Low

Technical cyber security

Network security

Protect critical services with their own data flow

This task helps you comply with the following requirements

2.5.6: Protect particularly critical services with their own data flow NSM ICT-SP

§ 4.2: Filtrering av nätverkstrafik MSBFS 2020:7

§ 59: Backup af kritiske systemer Energisektor beredskabsbekendtgørelse

Determining responsibilities for backing up important information assets

Critical

High

Normal

Low

Technical cyber security

Backups

Determining responsibilities for backing up important information assets

This task helps you comply with the following requirements

12.3.1: Information backup ISO 27001

I24: Varmuuskopiointi Katakri

PR.IP-4: Backups NIST

TEK-20: Varmuuskopiointi Julkri

8.13: Information backup ISO 27001

Defining a backup strategy

Critical

High

Normal

Low

Technical cyber security

Backups

Defining a backup strategy

This task helps you comply with the following requirements

12.3: Backup ISO 27001

12.3.1: Information backup ISO 27001

TEK-20: Varmuuskopiointi Julkri

8.13: Information backup ISO 27001

A1.2: Recovery of infrastructure according to objectives SOC 2

Complete these tasks in Cyberday ISMS ->

The ISMS component hierachy

When building an ISMS, it's important to understand the different levels of information hierarchy. Here's how Cyberday is structured.

Framework

Sets the overall compliance standard or regulation your organization needs to follow.

Requirements

Break down the framework into specific obligations that must be met.

Tasks

Concrete actions and activities your team carries out to satisfy each requirement.

Policies

Documented rules and practices that are created and maintained as a result of completing tasks.

Never duplicate effort. Do it once - improve compliance across frameworks.

Reach multi-framework compliance in the simplest possible way‍

Security frameworks tend to share the same core requirements - like risk management, backup, malware, personnel awareness or access management.

Cyberday maps all frameworks’ requirements into shared tasks - one single plan that improves all frameworks’ compliance.

Do it once - we automatically apply it to all current and future frameworks.

Start free trial