cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Data Assessments (CIA- Confidentiality, Integrity, Availability)

cnisparnorddk
Super Contributor

To assess the criticality of data, you often use the CIA Assessment Triad, to know in which situation the data becomes critical to the business. As I recall I think I have seen this assessment template in earlier  version of Hopex. 

 

Currently we are using V5, and I can not find it any longer. 

 

Can anyone help?

1 Reply

cnisparnorddk
Super Contributor

In the DORA regulation "Authenticity" is the new dimensioon to the CIA-Triade
"Confidentiality" "Integrity" "Availability" "Authenticity"

Related to BCM it state: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX%3A32022R2554 

Efficient business continuity and recovery plans are necessary to allow financial entities to promptly and quickly resolve ICT-related incidents, in particular cyber-attacks, by limiting damage and giving priority to the resumption of activities and recovery actions in accordance with their back-up policies. However, such resumption should in no way jeopardise the integrity and security of the network and information systems or the availability, authenticity, integrity or confidentiality of data.

How do HOPEX support assessing: "Confidentiality" "Integrity" "Availability" "Authenticity"