ДСТУ ETSI EN 319 401:2026 Электронные подписи и инфраструктуры (ESI). Общие требования к политике для предоставлятелей доверительных услуг (ETSI EN 319 401 V3.2.1 (2026-01), ІDT)



ДСТУ ETSI EN 319 401:2026
(ETSI EN 319 401 V3.2.1 (2026-01), IDT)

Електронні підписи та інфраструктури (ESI). Загальні вимоги щодо політики для надавачів довірчих послуг

 
     
Не є офіційним виданням.
Офіційне видання розповсюджує національний орган стандартизації
(ДП «УкрНДНЦ» http://uas.gov.ua)

Contents

Intellectual Property Rights

Foreword

Modal verbs terminology

Introduction

1 Scope

2 References

2.1 Normative references

2.2 Informative references

3 Definition of terms, symbols, abbreviations and notation

3.1 Terms

3.2 Symbols

3.3 Abbreviations

3.4 Notation

4 Overview

4.1 General

4.2 Applicability of Conditional Requirements

5 Risk Management Framework and Risk Assessment

6 Policies and practices

6.1 Trust Service Practice statement

6.2 Terms and Conditions

6.3 Information and Network Security Policy

7 TSP management and operation

7.1 Internal organization

7.1.1 General

7.1.2 Organization reliability

7.1.3 Segregation of duties

7.2 Human resources

7.3 Asset management

7.3.1 General requirements

7.3.2 Assets classification

7.3.3 Storage media and asset handling

7.4 Access control

7.4.1 General

7.4.2 Privileged and system administration accounts

7.4.3 Administration systems

7.4.4 Identification

7.4.5 Authentication

7.4.6 Multi-factor authentication

7.5 Cryptographic controls

7.6 Physical and environmental security

7.7 Operation security

7.8 Network security

7.9 Vulnerabilities and Incident management

7.9.1 Monitoring and logging

7.9.2 Incident response

7.9.3 Reporting

7.9.4 Event assessment and classification

7.9.5 Post-incident reviews

7.10 Collection of evidence

7.11 Business continuity management

7.11.1 General

7.11.2 Back up

7.11.3 Crisis management

7.12 TSP termination and termination plans

7.13 Compliance

7.14 Supply chain

7.14.1 Supply chain policy

7.14.2 Supply chain procedures and processes

7.14.3 Responsibility, third parties agreements and SLA

Annex A (informative): Mapping ETSI EN 319 401 requirements with DORA Regulation

Annex B (informative): Mapping ETSI EN 319 401 requirements with eIDAS Regulation

Annex C (informative): Mapping ETSI EN 319 401 requirements with Commission Implementing Regulation (EU) 2024/2690 (NIS2)

Annex D (informative): Change history

History