Reguli noi de securitate cibernetică pentru firmele din grupuri, publicate în Monitorul Oficial. DNSC a stabilit cum se aplică

The National Cyber Security Directorate (DNSC) has outlined new cybersecurity requirements for companies within enterprise groups, clarifying how existing security measures apply. Published in the Official Monitor, these regulations specify that companies must demonstrate effective implementation of security controls, which can be centralized, implemented, or shared. The guidelines cover key areas of cybersecurity management, including governance, risk management, and incident response. A maturity model with five stages evaluates the application of security controls, emphasizing active participation in governance. The new rules do not alter existing controls or maturity stages but clarify their application in group structures.