Cyber Security Audit

The operator of essential service is obliged to verify the efficiency of implemented security measures and the fulfilment of requirements by carrying out cybersecurity audit up to 2 years since the day of being registered in the essential services operators’ registry. The audit shall be carried out in the extend declared according to general binding regulation issued by the Authority with regard to information classification and networks and information systems category after every change with the significant impact on implemented security measures has been made and in certain time interval. The audit is carried out by the conformity assessment body which is accredited as the body competent to evaluate conformity in the cybersecurity area.