Personnel security

Catalog reference

Designate the staff and other people who work in the entity and give them roles, responsibilities and authorities for the security of your network and information systems (art. 14(1)). Evaluate that designation periodically and update it where needed (art. 14(2)). Set reliability requirements that your staff and other people who work in the entity must meet, as far as appropriate and necessary for their tasks on the security of the entity's network and information systems (art. 14(3)). Exclude this only if the Account is exclusively one of the eleven entity types Implementing Regulation 2024/2690 covers: DNS service providers, top-level domain (TLD) name registries, cloud computing service providers, data centre service providers, content delivery network providers, managed service providers, managed security service providers, online marketplaces, online search engines, social networking service platforms, and trust service providers. An entity that is only partly one of those types keeps both sets.