The
National Cryptologic centre
has published the Guide CCN-STIC 819. Compensatory measures
, which deals with a number of alternative security measures when it is not possible to the proper implementation of those contained in annex II to the national security, provided that they warranted documentary evidence that equally or better protection of the risk on the assets and satisfy the basic principles and minimum requirements.
The guide aims to assist the entities of the scope of the NHIS that, for various types of reasons (technical, operational, budgetary and other activities), and properly documented and justified, is unable to implement any of the security measures provided for in the TEAMS.
The document reflects the scope of application of these countervailing measures, a table of audit of such measures, evaluation and audit, as well as legal references and policy, together with some scenarios as an example.
