Agencja Unii Europejskiej ds. Cyberbezpieczeństwa, Metodologia sektorowych ocen cyberbezpieczeństwa
Metodologia sektorowych ocen cyberbezpieczeństwa
METHODOLOGY FOR SECTORAL CYBERSECURITY ASSESSMENTS EU
Cybersecurity Certification Framework
SEPTEMBER 2021
EXECUTIVE SUMMARY
Cybersecurity certification under the European Union Cybersecurity Act (CSA) is intended to increase trust and security for European consumers and businesses and help to achieve a genuine digital single market .
This requires that all relevant levels of the ICT market, from sectoral ICT services and systems via ICT infrastructures to ICT products and ICT processes, will be addressed and that the related cybersecurity certification schemes are well accepted by the market. The CSA stipulates specific requirements, which target efficiency and coherence between schemes of the CSA’s cybersecurity certification framework. These requirements include:
The security and assurance requirements for ICT services, ICT processes or ICT products should be defined based on the risk associated with their intended use.
Assurance levels should be implemented consistently across schemes.
Pełna treść dostępna po zalogowaniu do LEX