Bulgaria Ordinance on Minimum Requirements for Network and Information Security (2019)
Chapter Two, Section II: protection (Articles 13 to 31) – Bulgaria Ordinance on Minimum Requirements for Network and Information Security (2019)

Bulgaria Ordinance on Minimum Requirements for Network and Information Security (2019) 21: Protect hardware against technical failure and unauthorised access: maintain and monitor the manufacturer's environmental and mechanical conditions, run planned maintenance under the lifecycle policy, and place devices in physically and logically protected zones matching the information they handle

What does 21 require?

To reduce incidents from technical failure the entity provides the environmental and mechanical conditions the manufacturer specifies, monitors the parameters of those conditions, and performs planned, regular technical maintenance in line with its lifecycle policy. To reduce unauthorised access it places devices in physically and logically protected zones chosen according to the classification of the information they process.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 2 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO 27002:2022 · 2 controls

  • 7.13 Equipment maintenance
  • 7.8 Equipment siting and protection

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Chapter Two, Section II: protection (Articles 13 to 31) – Bulgaria Ordinance on Minimum Requirements for Network and Information Security (2019)

Query this from an agent

The graph holds this control, the 2 it maps to, and the evidence behind each claim, over MCP and REST.