Requirement

Чл. 22.(2.9)(достъпа): Политики за контрол на достъпа

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

Мерките по ал. 1 се основават на подход, обхващащ всички опасности, които имат за цел да защитят мрежовите и информационните системи и физическата среда на тези системи от инциденти, и включват политики за контрол на достъпа.

Fulfill this requirement by completing the tasks below ->

This requirement is part of the framework:

Закон за прилагане на NIS2 (България)

Other requirements of the framework

Чл. 22.(2.9)(достъпа): Политики за контрол на достъпа

Best practices

How to implement:

Чл. 22.(2.9)(достъпа): Политики за контрол на достъпа

This policy on

Чл. 22.(2.9)(достъпа): Политики за контрол на достъпа

provides a set concrete tasks you can complete to secure this topic. Follow these best practices to ensure compliance and strengthen your overall security posture.

Read below what concrete actions you can take to improve this ->

Frameworks that include requirements for this topic:

No items found.

How to improve security around this topic

In Cyberday, requirements and controls are mapped to universal tasks. A set of tasks in the same topic create a Policy, such as this one.

Here's a list of tasks that help you improve your information and cyber security related to

Чл. 22.(2.9)(достъпа): Политики за контрол на достъпа

Task name

Priority

Task completes

Complete these tasks to increase your compliance in this policy.

Critical

No other tasks found.

Complete these tasks in Cyberday ISMS ->

How to comply with this requirement

In Cyberday, requirements and controls are mapped to universal tasks. Each requirement is fulfilled with one or multiple tasks.

Here's a list of tasks that help you comply with the requirement

Чл. 22.(2.9)(достъпа): Политики за контрол на достъпа

of the framework

Закон за прилагане на NIS2 (България)

Task name

Priority

Task completes

Complete these tasks to increase your compliance in this policy.

Critical

Defining and documenting accepted authentication methods

Critical

High

Normal

Low

System management

Access control and authentication

Defining and documenting accepted authentication methods

This task helps you comply with the following requirements

Članak 30.1.i (Pristup): Politike kontrole pristupa NIS2 Croatia

Članak 30.1.j: Korištenje višefaktorske provjere autentičnosti ili rješenja kontinuirane provjere autentičnosti NIS2 Croatia

4.5: Käyttöoikeuksien hallinta TiHL tietoturvavaatimukset

9.7 §: Pääsynhallinta, todentaminen ja MFA Kyberturvallisuuslaki

4.1.2: Security of authentication TISAX

Use and evaluation of password management system

Critical

High

Normal

Low

System management

Access control and authentication

Use and evaluation of password management system

This task helps you comply with the following requirements

Članak 30.1.i (Pristup): Politike kontrole pristupa NIS2 Croatia

Članak 30.1.j: Korištenje višefaktorske provjere autentičnosti ili rješenja kontinuirane provjere autentičnosti NIS2 Croatia

9.7 §: Pääsynhallinta, todentaminen ja MFA Kyberturvallisuuslaki

30 § 3.9° (l'accès): Contrôle d'accès NIS2 Belgium

PR.AC-1: Identities and credentials are issued, managed, verified, revoked, and audited for authorized devices, users, and processes.CyberFundamentals

Use of dedicated admin accounts in critical data systems

Critical

High

Normal

Low

System management

Access control and authentication

Use of dedicated admin accounts in critical data systems

This task helps you comply with the following requirements

Članak 30.1.i (Pristup): Politike kontrole pristupa NIS2 Croatia

9.7 §: Pääsynhallinta, todentaminen ja MFA Kyberturvallisuuslaki

4.2.1: Access Management TISAX

30 § 3.9° (l'accès): Contrôle d'accès NIS2 Belgium

2.6.4: Minimise privileges for end users and special users NSM ICT-SP

Defining and documenting access roles

Critical

High

Normal

Low

System management

Access control and authentication

Defining and documenting access roles

This task helps you comply with the following requirements

Članak 30.1.i (Pristup): Politike kontrole pristupa NIS2 Croatia

4.5: Käyttöoikeuksien hallinta TiHL tietoturvavaatimukset

9.7 §: Pääsynhallinta, todentaminen ja MFA Kyberturvallisuuslaki

4.2.1: Access Management TISAX

4.1.2: Security of authentication TISAX

Rules and formal management process for admin rights

Critical

High

Normal

Low

System management

Access control and authentication

Rules and formal management process for admin rights

This task helps you comply with the following requirements

Članak 30.1.i (Pristup): Politike kontrole pristupa NIS2 Croatia

9.7 §: Pääsynhallinta, todentaminen ja MFA Kyberturvallisuuslaki

30 § 3.9° (l'accès): Contrôle d'accès NIS2 Belgium

2.6.2: Establish a formal process for administration of accounts, access rights and privileges NSM ICT-SP

2.6.4: Minimise privileges for end users and special users NSM ICT-SP

Instructions for reporting changes affecting access rights

Critical

High

Normal

Low

System management

Access control and authentication

Instructions for reporting changes affecting access rights

This task helps you comply with the following requirements

Članak 30.1.i (Pristup): Politike kontrole pristupa NIS2 Croatia

9.7 §: Pääsynhallinta, todentaminen ja MFA Kyberturvallisuuslaki

4.1.1: Management of access methods TISAX

30 § 3.9° (l'accès): Contrôle d'accès NIS2 Belgium

14.5.10.b): Prieigos kontrolė NIS2 Lithuania

Implementing formal access control processes

Critical

High

Normal

Low

System management

Access control and authentication

Implementing formal access control processes

This task helps you comply with the following requirements

Članak 30.1.i (Pristup): Politike kontrole pristupa NIS2 Croatia

9.7 §: Pääsynhallinta, todentaminen ja MFA Kyberturvallisuuslaki

4.1.2: Security of authentication TISAX

30 § 3.9° (l'accès): Contrôle d'accès NIS2 Belgium

2.6.2: Establish a formal process for administration of accounts, access rights and privileges NSM ICT-SP

Centralized record of user's access rights to data systems

Critical

High

Normal

Low

System management

Access control and authentication

Centralized record of user's access rights to data systems

This task helps you comply with the following requirements

Članak 30.1.i (Pristup): Politike kontrole pristupa NIS2 Croatia

9.7 §: Pääsynhallinta, todentaminen ja MFA Kyberturvallisuuslaki

30 § 3.9° (l'accès): Contrôle d'accès NIS2 Belgium

2.6.3: Use a centralised tool to manage accounts, access rights and privileges NSM ICT-SP

14.5.10.b): Prieigos kontrolė NIS2 Lithuania

Complete these tasks in Cyberday ISMS ->

The ISMS component hierachy

When building an ISMS, it's important to understand the different levels of information hierarchy. Here's how Cyberday is structured.

Framework

Sets the overall compliance standard or regulation your organization needs to follow.

Requirements

Break down the framework into specific obligations that must be met.

Tasks

Concrete actions and activities your team carries out to satisfy each requirement.

Policies

Documented rules and practices that are created and maintained as a result of completing tasks.