What changes on 15/07/2024
The text in force from 25/06/2024 compared with the text from 15/07/2024.
0 inserted
41 amended
0 deleted
0 moved
Read the act as of 15/07/2024 · other versions:
Title I
Title II › Chapter I › Section 1
Title II › Chapter I › Section 2
- amended Article 3 - ICT risk management
Title II › Chapter I › Section 3
Title II › Chapter I › Section 4
- amended Article 6 - Encryption and cryptographic controls
- amended Article 7 - Cryptographic key management
Title II › Chapter I › Section 5
- amended Article 8 - Policies and procedures for ICT operations
- amended Article 9 - Capacity and performance management
- amended Article 10 - Vulnerability and patch management
- amended Article 11 - Data and system security
- amended Article 12 - Logging
Title II › Chapter I › Section 6
- amended Article 13 - Network security management
- amended Article 14 - Securing information in transit
Title II › Chapter I › Section 7
- amended Article 15 - ICT project management
- amended Article 16 - ICT systems acquisition, development, and maintenance
- amended Article 17 - ICT change management
Title II › Chapter I › Section 8
Title II › Chapter II
- amended Article 19 - Human resources policy
- amended Article 20 - Identity management
- amended Article 21 - Access control
Title II › Chapter III
- amended Article 22 - ICT-related incident management policy
- amended Article 23 - Anomalous activities detection and criteria for ICT-related incidents detection and response
Title II › Chapter IV
- amended Article 24 - Components of the ICT business continuity policy
- amended Article 25 - Testing of the ICT business continuity plans
- amended Article 26 - ICT response and recovery plans
Title II › Chapter V
- amended Article 27 - Format and content of the report on the review of the ICT risk management framework
Title III › Chapter I
- amended Article 28 - Governance and organisation
- amended Article 29 - Information security policy and measures
- amended Article 30 - Classification of information assets and ICT assets
- amended Article 31 - ICT risk management
- amended Article 32 - Physical and environmental security
Title III › Chapter II
- amended Article 33 - Access Control
- amended Article 34 - ICT operations security
- amended Article 35 - Data, system and network security
- amended Article 36 - ICT security testing
- amended Article 37 - ICT systems acquisition, development, and maintenance
- amended Article 38 - ICT project and change management
Title III › Chapter III
- amended Article 39 - Components of the ICT business continuity plan
- amended Article 40 - Testing of business continuity plans