Division 4.2 Information Assurance

United Kingdom

1. 4.2.1Organisers shall use risk management processes to identify the risks linked to the use of their systems, including for the rights and freedoms of signatories, and to determine the appropriate and proportional measures to prevent and mitigate the impact of incidents affecting the security of the network and information systems that they use in their operations.
2. 4.2.2Organisers shall provide documentation showing that they:
3. 4.2.3The measures to prevent and mitigate the impact of incidents affecting the security of the systems shall cover the following domains:
4. 4.2.4Division 4.2.4