Kibernetinio Saugumo Įstatymas (Lithuania)

Requirement

14.5.12): Kibernetinio saugumo prieigos ir duomenų teisių politika

Oh no! No description found. But not to worry. Read from Tasks below how to advance this topic.

Kibernetinio saugumo reikalavimai apima šiuos elementus: kibernetinio saugumo subjektų valdomų ir (ar) tvarkomų tinklų ir informacinių sistemų naudotojų, administratorių, kibernetinio saugumo subjektų tiekėjų, jų subtiekėjų ir kitų ūkio subjektų teisių ir prieigos prie kibernetinio saugumo subjektų valdomų ir (ar) tvarkomų tinklų ir informacinių sistemų ir (ar) skaitmeninių duomenų suteikimo ir valdymo politiką

Fulfill this requirement by completing the tasks below ->

This requirement is part of the framework:

Kibernetinio Saugumo Įstatymas (Lithuania)

Other requirements of the framework

14.5.12): Kibernetinio saugumo prieigos ir duomenų teisių politika

Best practices

How to implement:

14.5.12): Kibernetinio saugumo prieigos ir duomenų teisių politika

This policy on

14.5.12): Kibernetinio saugumo prieigos ir duomenų teisių politika

provides a set concrete tasks you can complete to secure this topic. Follow these best practices to ensure compliance and strengthen your overall security posture.

Read below what concrete actions you can take to improve this ->

Frameworks that include requirements for this topic:

No items found.

How to improve security around this topic

In Cyberday, requirements and controls are mapped to universal tasks. A set of tasks in the same topic create a Policy, such as this one.

Here's a list of tasks that help you improve your information and cyber security related to

14.5.12): Kibernetinio saugumo prieigos ir duomenų teisių politika

Task name

Priority

Task completes

Complete these tasks to increase your compliance in this policy.

Critical

No other tasks found.

Complete these tasks in Cyberday ISMS ->

How to comply with this requirement

In Cyberday, requirements and controls are mapped to universal tasks. Each requirement is fulfilled with one or multiple tasks.

Here's a list of tasks that help you comply with the requirement

14.5.12): Kibernetinio saugumo prieigos ir duomenų teisių politika

of the framework

Kibernetinio Saugumo Įstatymas (Lithuania)

Task name

Priority

Task completes

Complete these tasks to increase your compliance in this policy.

Critical

Regular reviewing of data system access rights

Critical

High

Normal

Low

System management

Access control and authentication

Regular reviewing of data system access rights

This task helps you comply with the following requirements

I06: Pääsyoikeuksien hallinnointi Katakri

16 §: Tietojärjestelmien käyttöoikeuksien hallinta TiHL

24. Responsibility of the controller GDPR

32. Security of processing GDPR

5. Principles relating to processing of personal data GDPR

Data processing partner listing and owner assignment

Critical

High

Normal

Low

Partner management

Agreements and monitoring

Data processing partner listing and owner assignment

This task helps you comply with the following requirements

Članak 30.1.d: Sigurnost lanca opskrbe NIS2 Croatia

9.4 §: Toimitusketjun hallinta ja valvonta Kyberturvallisuuslaki

1.2.4: Definition of responsibilities with service providers TISAX

1.3.3: Use of approved external IT services TISAX

6.1.1: Partner Information security TISAX

Documentation of partner contract status

Critical

High

Normal

Low

Partner management

Agreements and monitoring

Documentation of partner contract status

This task helps you comply with the following requirements

Članak 30.1.d: Sigurnost lanca opskrbe NIS2 Croatia

9.4 §: Toimitusketjun hallinta ja valvonta Kyberturvallisuuslaki

30 § 3.4°: La sécurité de la chaîne d'approvisionnement NIS2 Belgium

30 § 4°: Définir et contrôler les mesures de sécurité requises pour la chaîne d'approvisionnement NIS2 Belgium

2.1.9: Maintain security responsibility during outsourcing NSM ICT-SP

Creating and maintaining an access control policy

Critical

High

Normal

Low

System management

Access control and authentication

Creating and maintaining an access control policy

This task helps you comply with the following requirements

14.5.12): Kibernetinio saugumo prieigos ir duomenų teisių politika NIS2 Lithuania

40: Käyttövaltuuspolitiikka ja prosessi Digiturvan kokonaiskuvapalvelu

2.6.2: Establish a formal process for administration of accounts, access rights and privileges NSM ICT-SP

2.6.1: Create guidelines for access control NSM ICT-SP

6.8: Define and Maintain Role-Based Access Control CIS 18

Definition of supplier-specific responsible persons

Critical

High

Normal

Low

Partner management

Agreements and monitoring

Definition of supplier-specific responsible persons

This task helps you comply with the following requirements

15.2.2: Managing changes to supplier services ISO 27001

8.1.2: Ownership of assets ISO 27001

ID.SC-4: Audit suppliers and third-party partners NIST

14.5.12): Kibernetinio saugumo prieigos ir duomenų teisių politika NIS2 Lithuania

CC9.2: Partner risk management SOC 2

Rules and formal management process for admin rights

Critical

High

Normal

Low

System management

Access control and authentication

Rules and formal management process for admin rights

This task helps you comply with the following requirements

Članak 30.1.i (Pristup): Politike kontrole pristupa NIS2 Croatia

9.7 §: Pääsynhallinta, todentaminen ja MFA Kyberturvallisuuslaki

30 § 3.9° (l'accès): Contrôle d'accès NIS2 Belgium

2.6.2: Establish a formal process for administration of accounts, access rights and privileges NSM ICT-SP

2.6.4: Minimise privileges for end users and special users NSM ICT-SP

Descriptions of different access rights management processes

Critical

High

Normal

Low

System management

Access control and authentication

Descriptions of different access rights management processes

This task helps you comply with the following requirements

14.5.12): Kibernetinio saugumo prieigos ir duomenų teisių politika NIS2 Lithuania

ACCESS-1: Establish Identities and Manage Authentication C2M2

I-06: THE PRINCIPLE OF LEAST PRIVILEGE – MANAGEMENT OF ACCESS RIGHTS Katakri 2020

4.5: Käyttöoikeuksien hallinta TiHL tietoturvavaatimukset

4.2.1: Access Management TISAX

Centralized record of user's access rights to data systems

Critical

High

Normal

Low

System management

Access control and authentication

Centralized record of user's access rights to data systems

This task helps you comply with the following requirements

Članak 30.1.i (Pristup): Politike kontrole pristupa NIS2 Croatia

9.7 §: Pääsynhallinta, todentaminen ja MFA Kyberturvallisuuslaki

30 § 3.9° (l'accès): Contrôle d'accès NIS2 Belgium

2.6.3: Use a centralised tool to manage accounts, access rights and privileges NSM ICT-SP

14.5.10.b): Prieigos kontrolė NIS2 Lithuania

Complete these tasks in Cyberday ISMS ->

The ISMS component hierachy

When building an ISMS, it's important to understand the different levels of information hierarchy. Here's how Cyberday is structured.

Framework

Sets the overall compliance standard or regulation your organization needs to follow.

Requirements

Break down the framework into specific obligations that must be met.

Tasks

Concrete actions and activities your team carries out to satisfy each requirement.

Policies

Documented rules and practices that are created and maintained as a result of completing tasks.