AMC1 IS.AR.200(a)(11) Information security management system (ISMS)

• ED Decision 2023/010/R found in: Information Security (2023/203 and 2022/1645) Part-IS (Jun 2024)

AMC1 IS.AR.200(a)(11) Information security management system (ISMS) ED Decision 2023/010/R When establishing compliance with the provisions under point [IS.AR.200](#_DxCrossRefBm1193569457)(a)(11), the competent authority should implement and maintain a process to proactively share applicable and relevant information for performing information security risk assessments with other competent authorities, the Agency and other affected organisations within the scope of this Regulation, as soon as it becomes aware of such information. The competent authority should define and document which kind of information needs to be shared and with whom. ##### AMC1 IS.AR.200(a)(11) Information security management system (ISMS) *ED Decision 2023/010/R* When establishing compliance with the provisions under point [IS.AR.200](#_DxCrossRefBm1749084191)(a)(11), the competent authority should implement and maintain a process to proactively share applicable and relevant information for performing information security risk assessments with other competent authorities, the Agency and other affected organisations within the scope of this Regulation, as soon as it becomes aware of such information. The competent authority should define and document which kind of information needs to be shared and with whom.