What changes on 25/06/2024
The text in force from 24/05/2016 compared with the text from 25/06/2024.
73 inserted
0 amended
0 deleted
0 moved
Read the act as of 25/06/2024 · other versions: 15/07/2024
Title I
Title II › Chapter I › Section 1
Title II › Chapter I › Section 2
- inserted Article 3 - ICT risk management
Title II › Chapter I › Section 3
- inserted Article 4 - ICT asset management policy
- inserted Article 5 - ICT asset management procedure
Title II › Chapter I › Section 4
- inserted Article 6 - Encryption and cryptographic controls
- inserted Article 7 - Cryptographic key management
Title II › Chapter I › Section 5
- inserted Article 8 - Policies and procedures for ICT operations
- inserted Article 9 - Capacity and performance management
- inserted Article 10 - Vulnerability and patch management
- inserted Article 11 - Data and system security
- inserted Article 12 - Logging
Title II › Chapter I › Section 6
- inserted Article 13 - Network security management
- inserted Article 14 - Securing information in transit
Title II › Chapter I › Section 7
- inserted Article 15 - ICT project management
- inserted Article 16 - ICT systems acquisition, development, and maintenance
- inserted Article 17 - ICT change management
Title II › Chapter I › Section 8
Title II › Chapter II
- inserted Article 19 - Human resources policy
- inserted Article 20 - Identity management
- inserted Article 21 - Access control
Title II › Chapter III
- inserted Article 22 - ICT-related incident management policy
- inserted Article 23 - Anomalous activities detection and criteria for ICT-related incidents detection and response
Title II › Chapter IV
- inserted Article 24 - Components of the ICT business continuity policy
- inserted Article 25 - Testing of the ICT business continuity plans
- inserted Article 26 - ICT response and recovery plans
Title II › Chapter V
- inserted Article 27 - Format and content of the report on the review of the ICT risk management framework
Title III › Chapter I
- inserted Article 28 - Governance and organisation
- inserted Article 29 - Information security policy and measures
- inserted Article 30 - Classification of information assets and ICT assets
- inserted Article 31 - ICT risk management
- inserted Article 32 - Physical and environmental security
Title III › Chapter II
- inserted Article 33 - Access Control
- inserted Article 34 - ICT operations security
- inserted Article 35 - Data, system and network security
- inserted Article 36 - ICT security testing
- inserted Article 37 - ICT systems acquisition, development, and maintenance
- inserted Article 38 - ICT project and change management
Title III › Chapter III
- inserted Article 39 - Components of the ICT business continuity plan
- inserted Article 40 - Testing of business continuity plans
Title III › Chapter IV
Outside any heading
- inserted Recital 1
- inserted Recital 2
- inserted Recital 3
- inserted Recital 4
- inserted Recital 5
- inserted Recital 6
- inserted Recital 7
- inserted Recital 8
- inserted Recital 9
- inserted Recital 10
- inserted Recital 11
- inserted Recital 12
- inserted Recital 13
- inserted Recital 14
- inserted Recital 15
- inserted Recital 16
- inserted Recital 17
- inserted Recital 18
- inserted Recital 19
- inserted Recital 20
- inserted Recital 21
- inserted Recital 22
- inserted Recital 23
- inserted Recital 24
- inserted Recital 25
- inserted Recital 26
- inserted Recital 27
- inserted Recital 28
- inserted Recital 29
- inserted Recital 30
- inserted Preamble
Title IV
- inserted Article 42 - Entry into force