Government Decree 410/2017 (XII.15) on service providers providing services subject to notification
Online marketplaces, online search engines and cloud computing services all fall under a reporting obligation.
In addition to the obligation to register at the authority (OKF), the operators who have a reporting obligation are required by the decree to carry out risk analysis and use the results to implement security measures proportionate to the established risks as well as to report all significant security incidents that may occur in their network and information systems to the event management center.
Deadlines:
- effective as of: 10 May 2018
- reporting obligation (and registration, modifications): within 90 days
- realization: 10 May 2019
Failure to comply with statutory regulations may result in an administrative fine.
The Risk Management module of SeCube GRC supports the execution of risk analysis and management in line with the provisions contained in the regulation.
More details: https://www.secube.hu/modulok-bemutatasa/risk-modul-kockazat-elemzes-es-kezeles/
If you have any questions, please contact us at secube@kurt.hu.
