lexiara

anx_V__2__table__10

| 2.6. | Adopting national, regional or local information security policies on access to SFC2021 based on a risk assessment applicable to all authorities using SFC2021 and addressing the following aspects: (a) the IT security aspects of the work performed by the person or persons responsible for managing the access rights referred to in point 2.4 of section II in case of application of direct use; (b) for national, regional or local computer systems connected to SFC2021, through a technical interface referred to in point 2.3 the security measures for those systems allowing to be aligned with SFC2021 security requirements and covering: (i) physical security; (ii) data media and access control; (iii) storage control; (iv) access and password control; (v) monitoring; (vi) interconnection with SFC2021; (vii) communication infrastructure; (viii) human resources management prior to employment, during employment and after employment; (ix) incident management.

· All articles ·

Source: EUR-Lex (Cellar) · retrieved 2026-10-28 · Text as adopted (Official Journal); later amendments are not incorporated in this text.