#2444027
ciallaíonn ‘seirbhís TFC’ seirbhís TFC mar a shainmhínítear in Airteagal 2, pointe (13), de Rialachán (AE) 2019/881;
‘ICT service’ means an ICT service as defined in Article 2, point (13), of Regulation (EU) 2019/881;
Scag na torthaí
Bailiúcháin
19 toradh in 2 dhoiciméad
#1800692
ciallaíonn “leibhéal dearbhúcháin” bonn don mhuinín go sásaíonn táirge TFC, seirbhís TFC nó próiseas TFC, ceanglais slándála de chuid scéim Eorpach ar leith um dheimhniú cibearshlándála, go luaitear an leibhéal ag a ndearnadh an mheastóireacht ach nach ndéanann, ann féin, an leibhéal dearbhúcháin agus cainníocht na slándála a bhíonn ag an táirge TFC, seirbhís TFC nó próiseas TFC lena mbaineann a thomhas.
‘assurance level’ means a basis for confidence that an ICT product, ICT service or ICT process meets the security requirements of a specific European cybersecurity certification scheme, indicates the level at which an ICT product, ICT service or ICT process has been evaluated but as such does not measure the security of the ICT product, ICT service or ICT process concerned;
#1800553
Ba cheart, dá réir sin, leibhéal an dearbhaithe a bheith i gcomhréir leis an leibhéal riosca a bhaineann leis an úsáid a bheartaítear do tháirge TFC, seirbhís TFC nó próiseas TFC.
Accordingly, the assurance level should be commensurate with the level of the risk associated with the intended use of an ICT product, ICT service or ICT process.
#1800584
Is bonn muiníne é deimhniú ó scéim deimhniúcháin Eorpach go sásaíonn táirge TFC, seirbhís TFC nó próiseas TFC, na ceanglais slándála a bhíonn ag scéim Eorpach ar leith um dheimhniú cibearshlándála.
The assurance level of a European certification scheme is a basis for confidence that an ICT product, ICT service or ICT process meets the security requirements of a specific European cybersecurity certification scheme.
#1800684
ciallaíonn “seirbhís TFC” seirbhís lena ndéantar, go hiomlán nó go páirteach, traschur, stóráil, aisghabháil nó próiseáil ar fhaisnéis trí bhíthin córais gréasán agus faisnéise;
‘ICT service’ means a service consisting fully or mainly in the transmission, storing, retrieving or processing of information by means of network and information systems;
#1800685
ciallaíonn “próiseas TFC” sraith gníomhaíochtaí a dhéantar chun táirge TFC nó seirbhís TFC a dhearadh, a fhorbairt, a sheachadadh agus a chothabháil;
‘ICT process’ means a set of activities performed to design, develop, deliver or maintain an ICT product or ICT service;
#1800351
San am céanna, níl aon táirge TFC nó seirbhís TFC slán ó thaobh na cibearshlándála de ina hiomláine agus nach mór rialacha bunúsacha maidir leis an gcibearshláinteachas a chur chun cinn agus tosaíocht a thabhairt do na rialacha sin.
At the same time, no ICT product or ICT service is wholly cyber-secure and basic rules of cyber-hygiene have to be promoted and prioritised.
#1800357
Ba cheart saincheist na slándála a áirithiú le linn shaolré an táirge TFC, seirbhís TFC nó próisis TFC deartha agus forbartha a chur chun cinn ar feadh an ama chun an riosca dochair a d’fhéadfadh a bheith mar thoradh ar úsáid mhailíseach a laghdú.
Security should be ensured throughout the lifetime of the ICT product, ICT service or ICT process by design and development processes that constantly evolve to reduce the risk of harm from malicious exploitation.
#1800358
Ba cheart do ghnóthais, eagraíochtaí agus don earnáil phoiblí táirgí TFC, seirbhísí TFC nó próisis TFC arna ndearadh acu a chumrú ar bhealach lena ndeimhnítear ardleibhéal slándála a chuirfeadh ar chumas an chéad úsáideora cumraíocht réamhshocraithe a bheith aige a bhfuil na socruithe is sábháilte is féidir ag baint léi (“slándáil trí réamhshocrú”) agus, ar an dóigh sin, an t-ualach a laghdú ar úsáideoirí ar ghá dóibh táirge TFC, seirbhís TFC nó próiseas TFC a chumrú go hiomchuí.
Undertakings, organisations and the public sector should configure the ICT products, ICT services or ICT processes designed by them in a way that ensures a higher level of security which should enable the first user to receive a default configuration with the most secure settings possible (‘security by default’), thereby reducing the burden on users of having to configure an ICT product, ICT service or ICT process appropriately.
#1800545
Is é atá sa mheasúnú comhréireachta an nós imeachta trína ndéantar meastóireacht i dtaobh cé acu a comhlíonadh nó nár comhlíonadh ceanglais áirithe a bhaineann le táirge TFC, seirbhís TFC, nó próiseas TFC.
A conformity assessment is a procedure for evaluating whether specified requirements relating to an ICT product, ICT service or ICT process have been fulfilled.
#1800561
Is é atá i ráiteas comhréireachta ón Aontas doiciméad lena dtugtar le fios go bhfuil táirge TFC, seirbhís TFC nó próiseas TFC ar leithligh i gcomhréir le ceanglais na scéime Eorpach um dheimhniú cibearshlándála.
An EU statement of conformity is a document that states that a specific ICT product, ICT service or ICT process complies with the requirements of the European cybersecurity certification scheme.
#1800587
Baineann a gcion féin den dua agus den doimhneacht leis na leibhéil dearbhúcháin ó thaobh na meastóireachta ar tháirgí TFC, seirbhís TFC nó próiseas TFC agus is dá saintréithe go dtagraítear iontu do shonraíochtaí, do chaighdeáin agus do phróisis theicniúla is bainteach leis sin, lena n-áirítear rialuithe teicniúla, arb é is aidhm leo teagmhais a mhaolú nó a chosc.
The assurance levels would provide the corresponding rigour and depth of the evaluation of the ICT product, ICT service or ICT process and would be characterised by reference to technical specifications, standards and procedures related thereto, including technical controls, the purpose of which is to mitigate or prevent incidents.
#1800591
I dtaca le gach leibhéal dearbhúcháin, is ceart a bheith ag gach táirge TFC, seirbhís TFC nó próiseas TFC tacar feidhmeanna slándála, mar a shonraítear sa scéim, lena bhféadfaí an méid seo a leanas a áireamh: foirmíocht shlán ach a mbaintear an táirge as an mbosca, cód sínithe, maolú slán ar uasghrádú agus ar dhúshaothrú, agus coimircí iomlána i dtaca le cruach nó carn.
For all assurance levels, the ICT product, ICT service or ICT process should contain a number of secure functions, as specified by the scheme, which may include: a secure out-of-the-box configuration, a signed code, secure update and exploit mitigations and full stack or heap memory protections.
#1800607
Ba cheart go mbeadh rochtain ag an úsáideoir deiridh ar fhaisnéis maidir leis an tagairt don scéim um dheimhniú, an leibhéal dearbhaithe, an cur síos ar na rioscaí cibearshlándála a bhaineann leis an táirge TFC, an seirbhís TFC nó próiseas TFC, agus an t-údarás eisiúna nó an comhlacht eisiúna, nó a bheith in ann cóip den deimhniú Eorpach i ndáil le cibearshlándáil a fháil.
The end user should have access to information regarding the reference number of the certification scheme, the assurance level, the description of the cybersecurity risks associated with the ICT product, ICT service or ICT process, and the issuing authority or body, or should be able to obtain a copy of the European cybersecurity certificate.
#1800608
Ina theannta sin, ba cheart an t-úsáideoir deiridh a chur ar an eolas faoi bheartas tacaíochta cibearshlándála, eadhon cé chomh fada is féidir leis an úsáideoir deiridh a bheith ag súil le nuashonruithe nó paistí cibearshlándála a fháil, an mhonaróra nó an tsoláthraí táirgí TFC, seirbhís TFC nó próisis TFC.
In addition, the end user should be informed of the cybersecurity support policy, namely for how long the end user can expect to receive cybersecurity updates or patches, of the manufacturer or provider of ICT products, ICT services or ICT processes.
#1800609
I gcás inarb infheidhme, treoir a thabhairt maidir le gníomhartha nó le socruithe is féidir leis an úsáideoir deiridh a chur chun feidhme chun cibearshlándáil táirge TFC nó seirbhís TFC a chothabháil nó a mhéadú agus ba cheart pointe aonair teagmhála chun tuairisciú a dhéanamh agus tacaíocht a fháil i gcás cibearionsaithe (sa bhreis ar thuairisciú uathoibríoch) a sholáthar.
Where applicable, guidance on actions or settings that the end user can implement to maintain or increase the cybersecurity of the ICT product or of the ICT service and contact information of a single point of contact to report and receive support in the case of cyberattacks (in addition to automatic reporting) should be provided.
#1800620
Ba cheart do scéimeanna Eorpacha um dheimhniú cibearshlándála na coinníollacha faoina bhféadfadh sé a bheith mar cheangal ag nuashonrú go ndéanfaí táirge TFC, seirbhís TFC nó próiseas TFC a athdheimhniú nó go laghdófaí scóip an deimhnithe Eorpacha i ndáil le cibearshlándáil ar leith, agus aon tionchar díobhálacha féideartha a bheadh ag an nuashonrú ar chloí le riachtanais slándála an deimhnithe sin á chur san áireamh.
European cybersecurity certification schemes should specify the conditions under which an update may require that an ICT product, ICT service or ICT process be recertified or that the scope of a specific European cybersecurity certificate be reduced, taking into account any possible adverse effects of the update on compliance with the security requirements of that certificate.
#1800682
ciallaíonn “deimhniú Eorpach cibearshlándála” doiciméad a eisíonn comhlacht ábhartha lena bhfianaítear go bhfuiltear tar éis meastóireacht a dhéanamh ar an táirge TFC, seirbhís TFC nó próiseas TFC atá i gceist maidir le comhréireacht le ceanglais shonracha slándála arna leagan síos i scéim Eorpach um dheimhniú cibearshlándála;
‘European cybersecurity certificate’ means a document issued by a relevant body, attesting that a given ICT product, ICT service or ICT process has been evaluated for compliance with specific security requirements laid down in a European cybersecurity certification scheme;
#1800691
ciallaíonn “sonraíocht theicniúil” doiciméad lena bhforordaítear na ceanglais theicniúla nach mór do tháirge TFC, seirbhís TFC nó próiseas TFC a chomhlíonadh, nó nósanna imeachta um measúnú comhréireachta a bhaineann leis an méid sin;
‘technical specification’ means a document that prescribes the technical requirements to be met by, or conformity assessment procedures relating to, an ICT product, ICT service or ICT process;