Article 80

Identification and management of information and assets of space infrastructure

1. Union space operators shall establish, maintain and update comprehensive policies for the categorization and management of information and assets of space infrastructure.

2. Union space operators shall identify and document assets in accordance with point 2, of Annex VII, considering the risk assessments referred to in Article 78(2), and proportionately with the need to monitor and detect incidents referred to in Article 83.

3. Union space operators shall categorise information according to information security needs, based on, at least:

(a) the need to ensure the confidentiality, integrity, authenticity and availability of information;

(b) the level of criticality required by the security level of the respective space mission.

4. For the purposes of paragraphs 1, 2 and 3, Union space operators, and respectively entities applying a simplified risk management, as regards the critical assets and critical functions referred to in Article 79(1), first subparagraph, shall set up and maintain inventories. The inventories referred to in first subparagraph shall be drawn-up by individual space mission, indicating the origin and the current physical location of assets, including the identification of a cloud-based service, when relevant. Inventories shall be up to date.

Warning: Cannot modify header information - headers already sent by (output started at /var/www/html/article.php:8) in /var/www/html/script/loginauth.php on line 163